3Com S7906E - Switch, Configuration Manual

Page: 2051 / 2621

i
Table of Contents
1 ARP Attack Protection Configuration······································································································1-1
ARP Attack Protection Overview ············································································································1-1
ARP Attack Protection Configuration Task List ······················································································1-1
Configuring ARP Defense Against IP Packet Attacks ············································································1-2
Introduction······································································································································1-2
Configuring ARP Source Suppression ····························································································1-2
Enabling ARP Black Hole Routing ··································································································1-2
Displaying and Maintaining ARP Defense Against IP Packet Attacks ············································1-3
Configuring ARP Active Acknowledgement ····························································································1-3
Introduction······································································································································1-3
Configuring the ARP Active Acknowledgement Function ·······························································1-3
Configuring Source MAC Address Based ARP Attack Detection···························································1-3
Introduction······································································································································1-3
Configuration Procedure··················································································································1-3
Displaying and Maintaining Source MAC Address Based ARP Attack Detection···························1-4
Configuring ARP Packet Rate Limit ········································································································1-4
Introduction······································································································································1-4
Configuring the ARP Packet Rate Limit Function ···········································································1-4
Configuring ARP Detection ·····················································································································1-5
Introduction······································································································································1-5
Configuring ARP Detection Based on Specified Objects ································································1-5
Enabling ARP Detection Based on Static IP Source Guard Binding Entries/DHCP Snooping
Entries/802.1X Security Entries/OUI MAC Addresses ····································································1-6
Displaying and Maintaining ARP Detection·····················································································1-7
ARP Detection Configuration Example I ·························································································1-7
ARP Detection Configuration Example II ························································································1-9