Chapter 69 Anti-Arpscan
XGS2220 Series User’s Guide
471
Figure 346 SECURITY > Anti-Arpscan > Anti-Arpscan Setup
The following table describes the fields in the above screen.
Table 267 SECURITY > Anti-Arpscan > Anti-Arpscan Setup
LABEL DESCRIPTION
Active Enable the switch button to enable Anti-arpscan on the Switch.
Port Threshold A port threshold is determined by the number of packets received per second on the port.
If the received packet rate is over the threshold, then the port is put into an Err-Disable
state. Type the maximum number of packets per second allowed on the port before it is
blocked.
Note: The allowed range is 2 to 255 packets received per second.
Host Threshold A host threshold is determined by the number of ARP-request packets received per
second. This is the global threshold rate for all hosts. If the rate of a host is over the
threshold, then that host is blocked by using a MAC address filter. A blocked host is
released automatically after the MAC aging time expires.
Type the maximum number of ARP-request packets allowed by a host before it is blocked.
Note: The allowed range is 2 to 100 ARP-request packets per second.
Note: The port-based threshold must be larger than the host-based threshold or
the host-based threshold will not be applied.
Port This field displays the port number.
* Settings in this row apply to all ports.
Use this row only if you want to make some settings the same for all ports. Use this row first to
set the common settings and then make adjustments on a port-by-port basis.
Note: Changes in this row are copied to all the ports as soon as you make them.