Use this command to configure the rate limit on a specified interface for ARP packets processing at a given rate measured in packets-per-second. The ARP packets rate limit can be configured on the specified interface independently on a per-port basis and on a per-host basis (hosts identified based on source IP address, VLAN ID, and port and hosts identified based on the link-layer source MAC address, VLAN ID, and port).
| Format | arp-guard rate-limit { per-src-ip | per-src-mac | per-port } pps |
| Mode | Interface Config |
| Parameter | Description |
|---|---|
| per-src-ip | Limits the rate of each source IP address on the specified interface. |
| per-src-mac | Limits the rate of each source MAC address on the specified interface. |
| per-port | Limits the rate on the specified port. |
| pps | Indicates the rate limit on the specified interface in packets-per-second, ranging from 0 to 300. A value of zero (0) means no limit - the value is not tracked. |
Example: The following example sets the rate-limit on interface 1/0/2 for hosts identified by source IP address.
(Switching)(Interface-1/0/2-Config)# arp-guard rate-limit per-src-ip 100
