Arp Anti-Attack Source-Mac Threshold - HP 6125G Command Reference Manual

Parameters
mac-address&<1- 1 0>: Specifies a MAC address list. The mac-address argument indicates a protected
MAC address in the format H-H-H. &<1- 1 0> indicates the number of protected MAC addresses that you
can configure.
Description
Use arp anti-attack source-mac exclude-mac to configure protected MAC addresses that are excluded
from ARP packet detection.
Use undo arp anti-attack source-mac exclude-mac to remove the configured protected MAC addresses.
By default, no protected MAC address is configured.
If no MAC address is specified in the undo arp anti-attack source-mac exclude-mac command, all the
configured protected MAC addresses are removed.
Examples
# Configure a protected MAC address.
<Sysname> system-view
[Sysname] arp anti-attack source-mac exclude-mac 2-2-2

arp anti-attack source-mac threshold

Syntax
arp anti-attack source-mac threshold threshold-value
undo arp anti-attack source-mac threshold
View
System view
Default level
2: System level
Parameters
threshold-value: Specifies the threshold for source MAC address based ARP attack detection, in the
range of 10 to 100.
Description
Use arp anti-attack source-mac threshold to configure the threshold for source MAC address based ARP
attack detection. If the number of ARP packets sent from a MAC address within five seconds exceeds this
threshold, the device considers this an attack.
Use undo arp anti-attack source-mac threshold to restore the default.
By default, the threshold for source MAC address based ARP attack detection is 50.
Examples
# Configure the threshold for source MAC address based ARP attack detection as 30.
<Sysname> system-view
[Sysname] arp anti-attack source-mac threshold 30
256