Configuration Guide
Security Configuration
Storm Suppression Configuration
4 min
introduction introduction storm suppression is a security technique used to control broadcast, known multicast, unknown unicast, and unknown multicast packets, preventing these four types of packets from causing broadcast storms after configuring broadcast, known multicast, unknown unicast, and unknown multicast storm suppression on a port, when the traffic of broadcast, known multicast, unknown unicast, or unknown multicast packets on the port exceeds the threshold set by the user, the port will discard the packets that exceed the traffic threshold this reduces the broadcast, known multicast, unknown unicast, and unknown multicast traffic on the port to a limited range, ensuring the normal operation of network services configuration examples configuration examples network requirements network requirements as shown in the figure, assuming switcha is located between the layer 2 network and the layer 3 network, it needs to prevent broadcast/known multicast/unknown unicast and unknown multicast messages forwarded by the layer 2 network from generating broadcast storms that can affect the normal operation of network services procedure procedure configure ethernet1 port byte based broadcast message suppression sonic(config)# interface ethernet 1 sonic(config if 1)# storm suppress multicast packets 1000 sonic(config if 1)# storm suppress broadcast packets 1000 sonic(config if 1)# storm suppress unknown packets 1000 verify configuration verify configuration sonic# show interfaces storm suppress name broadcast broadcast rate multicast multicast rate unkown unkown rate \ ethernet1 enable 1000kpps enable 1000kpps enable 1000kpps
