2020

Storm Control, Port

Blocking and Control
Plane Rate Limiting
for
CCNP SCOR Students
By
Eng. Abeer Hosni
 Port Security Features

Storm Control:

Switch(config)#int f0/1
Switch(config-if)#storm-control ?
action Action to take for storm-control
broadcast Broadcast address storm control
multicast Multicast address storm control
unicast Unicast address storm control

Switch(config-if)#storm-control unicast level ?

<0.00 - 100.00> Enter rising threshold
bps Enter suppression level in bits per second
pps Enter suppression level in packets per second

Switch(config-if)#storm-control unicast level pps 2

To verify:

Switch#show storm-control unicast

Interface Filter State Upper Lower Current
--------- ------------- ----------- ----------- ----------
Fa0/1 Forwarding 2 pps 2 pps 0 pps

Switch(config)#int f0/1
Switch(config-if)#storm-control action ?
shutdown Shutdown this interface if a storm occurs
trap Send SNMP trap if a storm occurs
Port Blocking:

Switch(config)#int f0/1
Switch(config-if)#switchport block ?
multicast Block unknown multicast addresses
unicast Block unknown unicast addresses
Switch(config-if)#switchport block multicast

To verify:

Switch#show int f0/1 switchport

<Output omitted>
Unknown unicast blocked: disabled
Unknown multicast blocked: enabled
Control Plane Rate Limiting:
Switch(config)#psp < arp | dhcp | igmp> pps <number>
Switch# show psp config dhcp

Best Wishes
Abeer :)