6 ARP Security Configuration
About This Chapter
ARP security ensures security and robustness of network devices by filtering out untrusted ARP
packets, checking the binding table of ARP packets, and defending against ARP gateway
conflicts.
6.1 ARP Security Overview
This section describes the principle of ARP security.
6.2 ARP Security Supported by the AR1200-S
The ARP security features supported by the AR1200-S include limitation of ARP entry learning,
ARP anti-spoofing, defense against ARP gateway attacks, source address-based ARP packet
suppression, source address-based ARP Miss packet suppression and ARP packet rate limit.
6.3 Configuring ARP Entry Limiting
This section describes how to configure ARP Entry Limiting.
6.4 Configuring ARP Anti-attack
The ARP anti-attack function defends against attacks from bogus hosts and gateways and man-
in-the-middle attacks.
6.5 Configuring ARP Suppression
If the AR1200-S receives a lot of ARP attack packets, the ARP table overflows or the CPU usage
is high. The AR1200-S prevents ARP attacks by discarding attack packets and limiting the rate
of attack packets.
6.6 Maintaining ARP Security
This section describes how to maintain ARP security.
6.7 Configuration Examples
This section provides ARP security configuration examples.
Huawei AR1200-S Series Enterprise Routers
Configuration Guide - Security 6 ARP Security Configuration
Issue 02 (2012-03-30) Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
125
To Next Page
Loading...
