14.3.2
ARP Defend
With the ARP Defend enabled, the switch can terminate receiving the ARP packets for 300
seconds when the transmission speed of the legal ARP packet on the port exceeds the defined
value so as to avoid ARP Attack flood.
Choose the menu
Network Security
→
ARP Inspection
→ARP Defend
to load the following
page.
Figure 14-13 ARP Defend
Configuration Procedure:
Select one or more ports, and configure the relevant parameters. Then click
Apply.
Entry Description:
UNIT:
Select the unit ID of the desired member in the stack.
Select:
Select your desired port for configuration. It is multi-optional.
Port:
Displays the port number.
Trust State:
Enable or disable this port to be a trusted port, on which the
ARP packets will be forwarded directly without checked.
Speed(10-300)pps:
Enter a value to specify the maximum amount of the received
ARP packets per second.
Burst Interval(1-15)s:
Enter a value to specify a time range. If the average speed of
received ARP packets in this time range reach the limit, the port
will be shut down.
Status
Displays the status of the ARP attack.
Operation:
Click the
Recover
button to restore the port to the normal
status. The ARP Defend for this port will be re-enabled.
348