Table of Contents
Advertisement
Figure 275 Advanced Application > Anti-Arpscan > Configure
The following table describes the fields in the above screen.
Table 183 Advanced Application > Anti-Arpscan > Configure
LABEL
DESCRIPTION
Active
Select this to enable Anti-arpscan on the Switch.
Port Threshold
A port threshold is determined by the number of packets received per second on the
port. If the received packet rate is over the threshold, then the port is put into an Err-
Disable state. Type the maximum number of packets per second allowed on the port
before it is blocked.
Note: The allowed range is 2 to 255 packets received per second.
Host Threshold
A host threshold is determined by the number of ARP-request packets received per
second. This is the global threshold rate for all hosts. If the rate of a host is over the
threshold, then that host is blocked by using a MAC address filter. A blocked host is
released automatically after the MAC aging time expires.
Type the maximum number of ARP-request packets allowed by a host before it is
blocked.
Note: The allowed range is 2 to 100 ARP-request packets per second.
Note: The port-based threshold must be larger than the host-based threshold or the
Port
Use port * to have all ports be Untrusted or Trusted. Anti-arpscan is not performed
on trusted hosts.
Chapter 36 Anti-Arpscan
host-based threshold will not be applied.
GS3700/XGS3700 Series User's Guide
376
Advertisement
Table of Contents
