The ipv6 nd security rate-limit command sets a rate limit for the system to process received ND messages.
The undo ipv6 nd security rate-limit command restores the default rate limit.
By default, no rate limit is set.
| Parameter | Description | Value |
|---|---|---|
| ratelimit-value | Specifies the rate limit for processing received ND messages. | The value is an integer ranging from 1 to 100, in messages per second. |
Usage Scenario
Usage Scenario
If an attacker keeps sending SEND messages to a device, the device will be busy verifying the RSA signature. To limit the rate at which the interface verifies the RSA signature of the SEND messages, you can run the ipv6 nd security rate-limit command.
Configuration Impact
If the rate at which the interface verifies the RSA signature of the SEND messages is out of the allowed range, the device will regard these messages insecure and discard them.