HP MSR SERIES

526
<Sysname> system-view
[Sysname] arp source-mac aging-time 60
arp source-mac exclude-mac
Use arp anti-attack source-mac exclude-mac to exclude specific MAC addresses from source
MAC-based ARP attack detection.
Use undo arp anti-attack source-mac exclude-mac to remove the excluded MAC addresses.
Syntax
arp source-mac exclude-mac mac-address&<1-n>
undo arp source-mac exclude-mac [ mac-address&<1-n> ]
Default
No MAC address is excluded from source MAC-based ARP attack detection.
Views
System view
Predefined user roles
network-admin
Parameters
mac-address&<1-n>: MAC address list. The mac-address argument indicates an excluded MAC address
in the format H-H-H. &<1-n> indicates the number of excluded MAC addresses that you can configure.
The value of n is 64.
Usage guidelines
If you do not specify any MAC address, the undo arp source-mac exclude-mac command removes all
excluded MAC addresses.
Examples
# Exclude a MAC address from source MAC-based ARP attack detection.
<Sysname> system-view
[Sysname] arp source-mac exclude-mac 2-2-2
arp source-mac threshold
Use arp source-mac threshold to configure the threshold for source MAC-based ARP attack detection. If
the number of ARP packets sent from a MAC address within 5 seconds exceeds this threshold, the device
recognizes this as an attack.
Use undo arp source-mac threshold to restore the default.
Syntax
arp source-mac threshold threshold-value
undo arp source-mac threshold
Default
The threshold for source MAC-based ARP attack detection is 30.