Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?


Prevent BUM Traffic Storms With Storm Control


Storm control can prevent excessive traffic from degrading the network. It lessens the impact of Broadcast, Unknown Unicast, and Multicast (BUM) traffic storms by monitoring traffic levels on EVPN-VXLAN interfaces, and dropping BUM traffic when a specified traffic level is exceeded.

In an EVPN-VXLAN environment, storm control monitors:

  • Layer 2 BUM traffic that originates in a VXLAN and is forwarded to interfaces within the same VXLAN.

  • Layer 3 multicast traffic that is received by an IRB interface in a VXLAN and is forwarded to interfaces in another VXLAN.

To configure storm control:

  • Create a storm control profile

  • Attach the storm control profile to a port profile

  • Apply the port profile to an interface or a VPG.

To configure storm control:

  1. Navigate to Overlay > Port Profiles.
  2. Next to Storm Control Profile, click Create.
  3. Fill in the following fields.




    Name of the storm control profile

    Bandwidth Level

    Maximum value (in percentage) in the range 0–100. If the bandwidth BUM traffic uses exceeds this value, the action (default drop or configured Interface shutdown) specified in the storm control profile is applied on the interface. The default bandwidth level is 20%.


    Action to be performed on the interface when the bandwidth used exceeds the specified bandwidth level. The default action is to drop the packets. You can also configure Interface Shutdown. For example, if you set a value 20% for the Bandwidth Level field, and specify an action Interface Shutdown, the interface shuts down when bandwidth exceeds 20%.

    Recovery Timeout

    This field appears if you select Interface Shutdown as the action.

    Specify a value in the range of 10–3600 for recovery timeout in seconds, after which a shut down interface is brought up again. The default recovery timeout value is 600 seconds.

    Traffic Types to Exclude

    Traffic types to be excluded from the storm control profile. By default, storm control is applied to all traffic types.

    The multicast options No multicast, No registered multicast, and No unregistered multicast are mutually exclusive. That is, you can specify only one of these multicast options at a time.

  4. Click Create.
  5. Under Overlay > Port Profiles click Create.

    The Create Profile Access screen appears.

  6. Specify a port profile name and select a storm control profile. You can attach only one storm control profile per port profile.

  7. Click Create.

    After you create a port profile, you can assign it to interfaces or VPGs as shown:

To delete a storm control profile, you must first remove it from the port profile. To delete a port profile, you must first detach the port profile from the VPG or the instance.