FoxGate S6424-S2C2 series User Manual

ARP Configuration
83
12.2.4 Configuring ARP Packet Source MAC
Address Consistency Check
This feature enables a gateway device to filter out ARP packets with a source MAC
address in the Ethernet header different from the sender MAC address in the message body,
so that the gateway device can learn correct ARP entries.
By default, system disables gateway spoofing.
Table 12-2 Configure ARP Packet Source MAC Address Consistency Check
Step
Command
Operation
step1
configure terminal
Enter global configuration mode
step2
arp anti-spoofing valid-check
Configure ARP Packet Source MAC
Address Consistency Check
step3
show arp anti-spoofing
validation operation
step4
end
return to privilege mode
step5
copy running-config
startup-config
save modified configuration
12.2.5 Configuring Default of Anti-Spoofing
Table 12-3 Configure default of anti-spoofing
Function
Default
arp anti-spoofing
disable
Configure ARP Packet Source MAC Address
Consistency Check
enable
arp anti-spoofing unknown {diacard | flood}
discard
12.2.6 Displaying and Maintain Anti-Spoofing
Table 12-4 Configure default of anti-spoofing
Command
Operation
show arp anti-spoofing
Display the status of anti-spoofing
show mac-address-table blackhole
Display users whether add into black hole
12.3 Configuring against ARP Flood
12.3.1 ARP Flood
Flood attacks are based on the principle of the general flow of a large number of attack
packets in the network equipment such as routers, switches, and servers, leading to depletion

FoxGate S6424-S2C2 series Specifications

General

Brand	FoxGate
Model	S6424-S2C2 series
Category	Switch
Language	English