[c-nsp] Arp Inspection Rate Limit

[NMaio at guesswho.com]

William,
Thanks for the response.  Funny you mention the print server because
that happens to be one device port I need to tweak since it occasionally
exceeds the 15 pps.
Thanks again,
Nick


-----Original Message-----
From: Murphy, William [mailto:William.Murphy at uth.tmc.edu] 
Sent: Tuesday, August 18, 2009 5:44 PM
To: Nicholas Maio; cisco-nsp at puck.nether.net
Subject: RE: Arp Inspection Rate Limit

On access layer ports in our environment 15pps works well.  Very rarely
we
have some weird print server or some device that bursts above that, but
we
never have had to go above 30pps on an access port.  Since we limit on
the
edge ports we don't put a limit on the trunks...

Bill M

-----Original Message-----
From: cisco-nsp-bounces at puck.nether.net
[mailto:cisco-nsp-bounces at puck.nether.net] On Behalf Of
NMaio at guesswho.com
Sent: Monday, August 17, 2009 2:06 PM
To: cisco-nsp at puck.nether.net
Subject: [c-nsp] Arp Inspection Rate Limit

Just a quick question.  

Taking into account that everyone's network is different and to find the
best limit you need to study a trace.....does anyone use a rule of thumb
for configuring the rate limit for arp inspection.  Does anyone find the
default 15 pps too low on ports other than etherchannels and trunks?

Thanks,

Nick

 

_______________________________________________
cisco-nsp mailing list  cisco-nsp at puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/