Arp Packet Source Mac Address Consistency Check Configuration Commands; Arp Anti-Attack Valid-Check Enable - HP 3600 v2 Series Command Reference Manual

|: Filters command output by specifying a regular expression. For more information about regular
expressions, see Fundamentals Configuration Guide.
begin: Displays the first line that matches the specified regular expression and all lines that follow.
exclude: Displays all lines that do not match the specified regular expression.
include: Displays all lines that match the specified regular expression.
regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters.
Description
Use the display arp anti-attack source-mac command to display attacking MAC addresses detected by
source MAC address based ARP attack detection.
If no interface is specified, the display arp anti-attack source-mac command displays attacking MAC
addresses detected on all the interfaces.
Examples
# Display the attacking MAC addresses detected by source MAC address based ARP attack detection.
<Sysname> display arp anti-attack source-mac slot 2
Source-MAC
23f3-1122-3344
23f3-1122-3355
23f3-1122-33ff
23f3-1122-33ad
23f3-1122-33ce
ARP packet source mac address consistency check
configuration commands

arp anti-attack valid-check enable

Syntax
arp anti-attack valid-check enable
undo arp anti-attack valid-check enable
View
System view
Default level
2: System level
Parameters
None
Description
Use the arp anti-attack valid-check enable command to enable ARP packet source MAC address
consistency check on the gateway. After you execute this command, the gateway device can filter out
ARP packets with the source MAC address in the Ethernet header different from the sender MAC address
in the ARP message.
VLAN ID Interface
4094 Eth1/0/1
4094 Eth1/0/2
4094 Eth1/0/3
4094 Eth1/0/4
4094 Eth1/0/5
306
Aging-time
10
30
25
30
2