How to prevent broadcast storms on the AC

WLAN devices support traffic suppression and user isolation to prevent broadcast storms.

Traffic suppression limits traffic rate to prevent broadcast storms caused by broadcast, multicast, or unknown unicast packets. User isolation isolates users to reduce users' broadcast packets and the risk of broadcast storms.

Example for configuring traffic suppression

[Huawei] interface gigabitethernet 0/0/1

[Huawei-GigabitEthernet0/0/1] broadcast-suppression packets 12600 //Set the rate limit in pps for broadcast packets.

[Huawei-GigabitEthernet0/0/1] multicast-suppression packets 25200 //Set the rate limit in pps for multicast packets.

[Huawei-GigabitEthernet0/0/1] unicast-suppression packets 12600 //Set the rate limit in pps for unknown unicast packets.

[Huawei-GigabitEthernet0/0/1] quit

Example for configuring user isolation

For V200R005:

[Huawei-wlan-view] service-set name test

[Huawei-wlan-service-set-test] user-isolate //Set user isolation for service set test.

[Huawei-wlan-service-set-test] quit

[Huawei-wlan-view] quit

For V200R006:

# Configure user isolation for a traffic profile.

system-view

[Huawei] wlan

[Huawei-wlan-view] traffic-profile name p1 //Create a traffic profile.

[Huawei-wlan-traffic-prof-p1] user-isolate l2 //Configure Layer 2 user isolation.

# Configure user isolation in an AP wired port profile.

system-view

[AC6605] wlan

[AC6605-wlan-view] wired-port-profile name wired

[AC6605-wlan-wired-port-prof-wired] mode endpoint

[AC6605-wlan-wired-port-prof-wired] user-isolate l2

[AC6605-wlan-wired-port-prof-wired] quit

[AC6605-wlan-view] ap-group name ap-group1

[AC6605-wlan-ap-group-ap-group1] wired-port-profile wired gigabitethernet 0

Scroll to top