Checking The Configuration; Maintaining Arp Security - Huawei Quidway S9300 Configuration Manual

Quidway S9300 Terabit Routing Switch
Configuration Guide - Security
Step 5 (Optional) Run:
arp anti-attack rate-limit alarm threshold threshold
The alarm threshold of the number of ARP packets discarded because the transmission rate is
exceeded is set.
By default, the alarm threshold of discarded ARP packets is 5.
----End

4.5.6 Checking the Configuration

Prerequisite
The configurations of the limitation on ARP transmission rate are complete.
Procedure
l
----End
Example
Run the display arp anti-attack configuration all command, and you can view the
configuration of ARP anti-attack.
<Quidway> display arp anti-attack configuration all
ARP anti-attack entry-check mode: fixed-MAC
ARP gateway-duplicate anti-attack function: enabled
ARP anti-attack log-trap-timer: 30seconds
(The log and trap timer of speed-limit, default is 0 and means disabled.)
ARP speed-limit for source-IP configuration:
IP-address
------------------------------------------------------------------------
10.0.0.1
10.0.0.3
10.0.0.8
2.1.1.10
Others
------------------------------------------------------------------------
4 specified IP addresses are configured, spec is 1024 items.
ARP miss speed-limit for source-IP configuration:
IP-address
------------------------------------------------------------------------
10.0.0.1
10.0.0.2
10.0.0.8
2.1.1.10
Others
------------------------------------------------------------------------
4 specified IP addresses are configured, spec is 1024 items.

4.6 Maintaining ARP Security

This section describes how to maintain ARP security.
Issue 06 (2010–01–08)
Run the display arp anti-attack configuration { arp-speed-limit | arpmiss-speed-
limit | all } command to view the configuration of ARP source suppression.
suppress-rate(pps)(rate=0 means function disabled)
200
300
0
1000
500
suppress-rate(pps)(rate=0 means function disabled)
200
300
0
1000
500
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
4 ARP Security Configuration
4-19