376
Configuring ARP packet source MAC address
consistency check
Introduction
The ARP packet source MAC address consistency check feature enables a gateway device to filter out
ARP packets that have a different source MAC address in the Ethernet header from the sender MAC
address in the message, so that the gateway device can learn correct ARP entries.
Configuration procedure
To enable ARP packet source MAC address consistency check:
Ste
Command
Remarks
1. Enter system view.
system-view N/A
2. Enable ARP packet source MAC address
consistency check.
arp anti-attack valid-check enable Disabled by default
Configuring ARP active acknowledgement
Introduction
The ARP active acknowledgement feature is configured on gateway devices to identify invalid ARP
packets.
ARP active acknowledgement works before the gateway creates or modifies an ARP entry to avoid
generating any incorrect ARP entry. For more information about its working mechanism, see ARP Attack
Protection Technology White Paper.
Configuration procedure
To configure ARP active acknowledgement:
Ste
Command
Remarks
1. Enter system view.
system-view N/A
2. Enable the ARP active acknowledgement
function.
arp anti-attack active-ack enable Disabled by default
To Next Page
Loading...
Need help?
General
