Configure The Dynamic Arp Aging Timer; Configure Arp Source Address Suppression - Huawei Quidway S3500 Series Operation Manual

Operation Manual - Network Protocol
Quidway S3500 Series Ethernet Switches
Perform the following configuration in VLAN interface view.
Table 2-2 Configure ARP timed probing function
Configure IP addresses requiring ARP
timed probing
Remove the IP addresses requiring ARP
timed probing
Configure a probing interval
Restore the default ARP probing interval
By default, no IP addresses requiring ARP timed probing, and the probing interval is set
to five seconds.
In S3500 Series Ethernet Switches, only S3526/S3526 FM/S3526 FS supports this
configuration.

2.2.3 Configure the Dynamic ARP Aging Timer

For purpose of flexible configuration, the system provides the following commands to
assign dynamic ARP aging period. When the system learns a dynamic ARP entry, its
aging period is based on the current value configured.
Perform the following configuration in system view.
Table 2-3 Configure the dynamic ARP aging timer
Configure the dynamic ARP aging timer
restore the default dynamic ARP aging time
By default, the aging time of dynamic ARP aging timer is 20 minutes.

2.2.4 Configure ARP Source Address Suppression

ARP Source Address Suppression allows the Ethernet switch to suppress malicious
ARP requests from the host. If a host of a certain source IP address sends a large
amount of different ARP requests during a 5-second interval, the system will discard
the ARP requests that exceed the limit. After the interval, the switch will come back to
process the ARP request from this source IP address.
Perform the following configuration in the system view.
Operation
Operation
Huawei Technologies Proprietary
2-3
Chapter 2 ARP Configuration
Command
arp probe ip ip-address
undo arp probe ip [ ip-address ]
arp timer probe time
undo arp timer probe
Command
arp timer aging aging-time
undo arp timer aging