HP E4510-48G, Command Reference Manual

Page: 275 / 1334

4-4
View
System view
Default Level
2: System level
Parameters
None
Description
Use the arp anti-attack active-ack enable command to enable the ARP active acknowledgement
function.
Use the undo arp anti-attack active-ack enable command to restore the default.
By default, the ARP active acknowledgement function is disabled.
Typically, this feature is configured on gateway devices to identify invalid ARP packets.
With this feature enabled, the gateway, upon receiving an ARP packet with a different source MAC
address from that in the corresponding ARP entry, checks whether the ARP entry has been updated
within the last minute:
z
If yes, the ARP entry is not updated;
z
If not, the gateway sends a unicast request to the source MAC address of the ARP entry.
Then,
z
If a response is received within five seconds, the ARP packet is ignored;
z
If no response is received, the gateway sends a unicast request to the source MAC address of the
ARP packet.
Then,
z
If a response is received within five seconds, the gateway updates the ARP entry;
z
If not, the ARP entry is not updated.
Examples
# Enable the ARP active acknowledgement function.
<Sysname> system-view
[Sysname] arp anti-attack active-ack enable
Source MAC Address Based ARP Attack Detection Configuration
Commands
arp anti-attack source-mac
Syntax
arp anti-attack source-mac { filter | monitor }
undo arp anti-attack source-mac [ filter | monitor ]
View
System view