Enabling Arp Black Hole Routing; Displaying And Maintaining Arp Defense Against Ip Packet Attacks; Configuration Example - HP 3600 v2 Series Configuration Manual

Step
3. Set the maximum number of packets with the
same source IP address but unresolvable
destination IP addresses that the device can
receive in 5 consecutive seconds.

Enabling ARP black hole routing

Step
1. Enter system view.
2. Enable ARP black hole routing.
Displaying and maintaining ARP defense against IP packet
attacks
Task
Display ARP source suppression
configuration information.

Configuration example

Network requirements
As shown in
20. The two areas connect to the gateway (Device) through an access switch.
A large number of ARP requests are detected in the office area and are considered as the consequence
of an IP flood attack. To prevent such attacks, configure ARP source suppression and ARP black hole
routing.
Figure 1 16, a LAN contains two areas: an R&D area in VLAN 10 and an office area in VLAN
Command
arp source-suppression limit
limit-value
Command
system-view
arp resolving-route enable
Command
display arp source-suppression [ |
{ begin | exclude | include }
regular-expression ]
374
Remarks
Optional.
10 by default.
Remarks
N/A
Optional.
Enabled by default.
Remarks
Available in any view