HP E4510-48G, Command Reference Manual

Page: 278 / 1334

4-7
Default Level
2: System level
Parameters
threshold-value : Threshold for source MAC address based ARP attack detection, in the range 10 to
100.
Description
Use the arp anti-attack source-mac threshold command to configure the threshold for source MAC
address based ARP attack detection. If the number of ARP packets sent from a MAC address within
five seconds exceeds this threshold, the device considers this an attack.
Use the undo arp anti-attack source-mac threshold command to restore the default.
By default, the threshold for source MAC address based ARP attack detection is 50.
Examples
# Configure the threshold for source MAC address based ARP attack detection as 30.
<Sysname> system-view
[Sysname] arp anti-attack source-mac threshold 30
display arp anti-attack source-mac
Syntax
display arp anti-attack source-mac { slot slot-number | interface interface-type interface-number }
View
Any view
Default Level
1: Monitor level
Parameters
interface interface-type interface-number : Displays attacking MAC addresses detected on the
interface.
slot slot-number : Displays attacking MAC addresses detected on the specified device. If the device is
in an IRF, the slot-number argument represents the member ID of the device; if the device is not in any
IRF, the slot-number argument represents the device ID.
Description
Use the display arp anti-attack source-mac command to display attacking MAC addresses detected
by source MAC address based ARP attack detection.
On a device, if no interface is specified, the display arp anti-attack source-mac command displays
attacking MAC addresses detected on all the interfaces.
Examples
# Display the attacking MAC addresses detected by source MAC address based ARP attack detection.