ZyXEL Communications GS2210 Series User Manual page 313

Figure 217 Advanced Application > Anti-Arpscan > Configure
The following table describes the labels in this screen.
Table 151 Advanced Application > Anti-Arpscan > Configure
LABEL DESCRIPTION
Active Select this to enable Anti-arpscan on the Switch.
Port Threshold A port threshold is determined by the number of packets received per second on the port.
If the received packet rate is over the threshold, then the port is put into an Err-Disable
state. Type the maximum number of packets per second allowed on the port before it is
blocked.
Note: The allowed range is 2 to 255 packets received per second.
Host Threshold A host threshold is determined by the number of ARP-request packets received per
second. This is the global threshold rate for all hosts. If the rate of a host is over the
threshold, then that host is blocked by using a MAC address filter. A blocked host is
released automatically after the MAC aging time expires.
Type the maximum number of ARP-request packets allowed by a host before it is
blocked.
Note: The allowed range is 2 to 100 ARP-request packets per second.
Note: The port-based threshold must be larger than the host-based threshold or the host-
Port This is the port index number. Use port * to have all ports be Untrusted or Trusted.
* Settings in this row apply to all ports.
Use this row only if you want to make some settings the same for all ports. Use this row
first to set the common settings and then make adjustments on a port-by-port basis.
Note: Changes in this row are copied to all the ports as soon as you make them.
Trusted State Select Untrusted or Trusted for the associated port. Anti-arpscan is not performed on
trusted hosts.
Chapter 34 Anti-Arpscan
based threshold will not be applied.
GS2210 Series User's Guide
313