HP E4510-48G, Command Reference Manual

Page: 279 / 1334

4-8
<Sysname> display arp anti-attack source-mac slot 1
Source-MAC VLAN-ID Interface Aging-time
23f3-1122-3344 4094 GE1/0/1 10
23f3-1122-3355 4094 GE1/0/2 30
23f3-1122-33ff 4094 GE1/0/3 25
23f3-1122-33ad 4094 GE1/0/4 30
23f3-1122-33ce 4094 GE1/0/5 2
ARP Packet Source MAC Address Consistency Check
Configuration Commands
arp anti-attack valid-ack enable
Syntax
arp anti-attack valid-check enable
undo arp anti-attack valid-check enable
View
System view
Default Level
2: System level
Parameters
None
Description
Use the arp anti-attack valid-check enable command to enable ARP packet source MAC address
consistency check on the gateway. After you execute this command, the gateway device can filter out
ARP packets with the source MAC address in the Ethernet header different from the sender MAC
address in the ARP message.
Use the undo arp anti-attack valid-check enable command to disable ARP packet source MAC
address consistency check.
By default, ARP packet source MAC address consistency check is disabled.
Examples
# Enable ARP packet source MAC address consistency check.
<Sysname> system-view
[Sysname] arp anti-attack valid-check enable
ARP Packet Rate Limit Configuration Commands
arp rate-limit
Syntax
arp rate-limit { disable | rate pps drop }