Orion A10E - Checking Configurations; Configuring Global ARP Packet Rate Limiting Auto-Recovery Time; Example for Configuring Dynamic ARP Inspection

Orion Networks
A10E/A28E/A28F Configuration Guide
6 Security
Orion Networks
163
Step
Configuration
Description
1
Alpha-A28E#config
Enter global configuration mode.
2
Alpha-A28E(config)#interface
port port-id
Enter physical layer interface
configuration mode.
3
Alpha-A28E(config-port)#ip
arp-rate-limit enable
Enable interface ARP packet rate
limiting.
4
Alpha-A28E(config-port)#ip
arp-rate-limit rate rate-value
Configure rate limiting on ARP
packets on the interface.
6.3.9 Configuring global ARP packet rate limiting auto-recovery
time
Configure ARP packet rate limiting auto-recovery time for the A10E/A28E as below.
Step
Configuration
Description
1
Alpha-A28E#config
Enter global configuration mode.
2
Alpha-A28E(config)#ip arp-
rate-limit recover enable
Enable ARP packet rate limiting auto-
recovery.
3
Alpha-A28E(config)#ip arp-
rate-limit recover time time
Configure ARP packet rate limiting
auto-recovery time.
6.3.10 Checking configurations
Use the following commands to check configuration results.
No.
Item
Description
1
Alpha-A28E#show ip arp-
inspection
Show dynamic ARP inspection
configurations.
2
Alpha-A28E#show ip arp-
inspection binding [ port
port-id ]
Show dynamic ARP inspection binding
table information.
3
Alpha-A28E#show ip arp-rate-
limit
Show ARP packet rate limiting
configurations.
6.3.11 Example for configuring dynamic ARP inspection
Networking requirements
To prevent ARP attacks, you need to configure dynamic ARP inspection function on Switch A,
as shown in Figure 6-3.