319
Parameters
mac-address&<1-10>: Specifies a MAC address list. The mac-address argument indicates a protected
MAC address in the format H-H-H. &<1-10> indicates the number of protected MAC addresses that you
can configure.
Description
Use the arp anti-attack source-mac exclude-mac command to configure protected MAC addresses that
are excluded from ARP packet detection.
Use the undo arp anti-attack source-mac exclude-mac command to remove the configured protected
MAC addresses.
By default, no protected MAC address is configured.
If no MAC address is specified in the undo arp anti-attack source-mac exclude-mac command, all the
configured protected MAC addresses are removed.
Examples
# Configure a protected MAC address.
<Sysname> system-view
[Sysname] arp anti-attack source-mac exclude-mac 2-2-2
arp anti-attack source-mac threshold
Syntax
arp anti-attack source-mac threshold threshold-value
undo arp anti-attack source-mac threshold
View
System view
Default level
2: System level
Parameters
threshold-value: Specifies the threshold for source MAC address based ARP attack detection, in the range
10 to 100.
Description
Use the arp anti-attack source-mac threshold command to configure the threshold for source MAC
address based ARP attack detection. If the number of ARP packets sent from a MAC address within five
seconds exceeds this threshold, the switch considers this an attack.
Use the undo arp anti-attack source-mac threshold command to restore the default.
By default, the threshold for source MAC address based ARP attack detection is 50.
Examples
# Configure the threshold for source MAC address based ARP attack detection as 30.
<Sysname> system-view
[Sysname] arp anti-attack source-mac threshold 30
To Next Page
Loading...
