My Cat 2960 has a port configured with broadcast strom-control with a 10% threshold. I connect a PC on that port and make it generate a massive ARP broadcast message on that port to simulate an ARP strom to see how the switch bahaves.
I can observe that the switch is doing well by blocking the ARP traffic when it reaches more than the 10% of bandwidth: other PC connected on the same VLAN see no ARP message when the storm-control is in action. Fine.
But when look at the CPU load of the switch, I can see that the "ARP Input" process is about 70%.
It seems to me that even if the traffic is blocked, the ARP broadcast traffic is still forwared to the switch CPU for a reason that I cannot understand.
I would think that the storm-control would block broadcast traffic for all including the management of the switch.
Is there something to do woth "Dynamic ARP inspection" ? If any, how can I disable the DAI on a Cat 2960 ?
Thanks for your replies.