Arp Anti-Attack Source-Mac Threshold; Display Arp Anti-Attack Source-Mac - HP 3600 v2 Series Command Reference Manual

[Sysname] arp anti-attack source-mac exclude-mac 2-2-2

arp anti-attack source-mac threshold

Syntax
arp anti-attack source-mac threshold threshold-value
undo arp anti-attack source-mac threshold
View
System view
Default level
2: System level
Parameters
threshold-value: Specifies the threshold for source MAC address based ARP attack detection, in the
range of 10 to 100.
Description
Use the arp anti-attack source-mac threshold command to configure the threshold for source MAC
address based ARP attack detection. If the number of ARP packets sent from a MAC address within five
seconds exceeds this threshold, the device considers this an attack.
Use the undo arp anti-attack source-mac threshold command to restore the default.
By default, the threshold for source MAC address based ARP attack detection is 50.
Examples
# Configure the threshold for source MAC address based ARP attack detection as 30.
<Sysname> system-view
[Sysname] arp anti-attack source-mac threshold 30

display arp anti-attack source-mac

Syntax
display arp anti-attack source-mac { slot slot-number | interface interface-type interface-number } [ |
{ begin | exclude | include } regular-expression ]
View
Any view
Default level
1: Monitor level
Parameters
interface interface-type interface-number: Displays attacking MAC addresses detected on the interface.
slot slot-number: Displays attacking MAC addresses detected on a specified IRF member switch. The
slot-number argument specifies the ID of an IRF member switch. The value range for the argument
depends on their member IDs in the IRF fabric, which you can display with the display irf command. On
a standalone device, the slot-number argument specifies the ID of the switch.
305