Command Manual - Network Protocol
Quidway S3500 Series Ethernet Switches Chapter 2 ARP Configuration Commands
Huawei Technologies Proprietary
2-3
[Quidway] arp source-suppression cache 10
2.1.4 arp source-suppression enable
Syntax
arp source-suppression enable
undo arp source-suppression enable
View
System view
Parameter
None
Description
Using arp source-suppression enable command, you can enable ARP source
address suppression. Using undo arp source-suppression enable command, you
can disable ARP source address suppression.
After ARP source address suppression is enabled, the system drops the packets with
the same source IP address on the port if a host on the network continuously sends the
IP packets whose destination IP address cannot be resolved and the traffic within five
seconds exceeds the predefined threshold. When the time interval (5 seconds) is
reached, the system resumes processing of IP packets. This feature can effectively
prevent malicious attacks.
By default, ARP source address suppression is not enabled.
In S3500 Series Ethernet Switches, only S3552G, S3552P, S3528G, S3528P and
S3552F supports this command.
For the related command, see display arp source-suppression.
Example
# Enable ARP source address suppression.
[Quidway] arp source-suppression enable
2.1.5 arp source-suppression limit
Syntax
arp source-suppression limit limit-value
undo arp source-suppression limit