H3C S5810 Series, Руководство по эксплуатации

Страница: 223 / 820

i
Table of Contents
1 ARP Configuration·····································································································································1-1
ARP Overview·········································································································································1-1
ARP Function ··································································································································1-1
ARP Message Format ·····················································································································1-1
ARP Address Resolution Process···································································································1-2
ARP Table ·······································································································································1-3
Configuring ARP ·····································································································································1-3
Configuring a Static ARP Entry ·······································································································1-3
Configuring the Maximum Number of ARP Entries for an Interface ···············································1-4
Setting the Aging Time for Dynamic ARP Entries ···········································································1-4
Enabling the ARP Entry Check ·······································································································1-5
ARP Configuration Example············································································································1-5
Configuring Gratuitous ARP····················································································································1-6
Introduction to Gratuitous ARP········································································································1-6
Configuring Gratuitous ARP ············································································································1-6
Displaying and Maintaining ARP·············································································································1-7
2 ARP Attack Defense Configuration ·········································································································2-1
ARP Attack Defense Configuration Task List ·························································································2-1
Configuring ARP Source Suppression····································································································2-2
Introduction to ARP Source Suppression························································································2-2
Configuring ARP Source Suppression ····························································································2-2
Displaying and Maintaining ARP Source Suppression ···································································2-2
Configuring ARP Active Acknowledgement ····························································································2-2
Introduction to ARP Active Acknowledgement ················································································2-2
Configuring ARP Active Acknowledgement ····················································································2-2
Configuring Source MAC Address Based ARP Attack Detection···························································2-3
Introduction to Source MAC Address Based ARP Attack Detection ···············································2-3
Configuring Source MAC Address Based ARP Attack Detection ···················································2-3
Displaying and Maintaining Source MAC Address Based ARP Attack Detection···························2-3
Configuring ARP Packet Source MAC Address Consistency Check ·····················································2-4
Introduction to ARP Packet Source MAC Address Consistency Check ·········································2-4
Configuring ARP Packet Source MAC Address Consistency Check ··············································2-4
Configuring ARP Packet Rate Limit ········································································································2-4
Introduction to ARP Packet Rate Limit ····························································································2-4
Configuring the ARP Packet Rate Limit Function ···········································································2-4
Configuring ARP Detection ·····················································································································2-5
Introduction to ARP Detection ·········································································································2-5
Enabling ARP Detection Based on DHCP Snooping Entries/Static IP-to-MAC Bindings ···············2-6
Configuring ARP Detection Based on Specified Objects ································································2-7
Displaying and Maintaining ARP Detection·····················································································2-8
ARP Detection Configuration Example ···························································································2-8