For S series switches, what is the impact of excessive ARP Replies on the CPU

For S series switches:
If excessive ARP Reply packets are sent to the CPU, the CPU may be overloaded. Run the display cpu-defend configuration packet-type arp-reply all or the display cpu-defend statistics packet-type arp-reply all command to check whether excessive ARP Reply packets are sent to the CPU.
In the display cpu-defend statistics packet-type arp-reply all command output. if the value of the Drop (Bytes) field is large, excessive ARP Reply packets are sent to the CPU.
In this case, adjust the CPCAR value for the ARP Reply packet. When an attack occurs, determine the attack source. You can use the packet obtaining function or enable debugging to check the attack source and configure the blacklist to reject the attack source.
Note: Improper CPCAR settings may affect services on your network. It is recommended that you contact Huawei engineers before adjusting the CPCAR settings.

Scroll to top