Checking The Configuration - Huawei Quidway S9300 Configuration Manual

4 ARP Security Configuration
Procedure
Step 1 Run:
system-view
The system view is displayed.
Step 2 Run:
arp anti-attack log-trap-timer time
Log and alarm functions are enabled for potential attacks.
time specifies the interval for writing an ARP log and sending an alarm. By default, the value is
0, indicating that log and alarm functions are disabled.
----End

4.4.9 Checking the Configuration

Prerequisite
The configurations of ARP anti-attack are complete.
Procedure
l
l
l
----End
Example
Run the display arp anti-attack configuration all command, and you can view the
configuration of ARP anti-attack.
<Quidway> display arp anti-attack configuration all
ARP anti-attack entry-check mode: fixed-MAC
ARP gateway-duplicate anti-attack function: enabled
ARP anti-attack log-trap-timer: 30seconds
(The log and trap timer of speed-limit, default is 0 and means disabled.)
Run the display arp anti-attack gateway-duplicate item command, and you can view
information about bogus gateway address attack on the network.
<Quidway> display arp anti-attack gateway-duplicate item
interface
-------------------------------------------------------------------------------
GigabitEthernet1/0/1
GigabitEthernet1/0/1
-------------------------------------------------------------------------------
There are 2 records in gateway conflict table
Run the display arp anti-attack check user-bind interface interface-type interface-number
command, and you can view the configuration of the binding table for checking ARP packets.
4-14
Run the display arp anti-attack configuration { entry-check | gateway-duplicate | log-
trap-timer | all } command to check the configuration of ARP anti-attack.
Run the display arp anti-attack gateway-duplicate item command to check information
about bogus gateway address attack on the network.
Run the display arp anti-attack check user-bind interface interface-type interface-
number command to check the configuration of the binding table for checking ARP packets.
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
IP address MAC address
2.1.1.1 0000-0000-0002
2.1.1.1 0000-0000-0004
Quidway S9300 Terabit Routing Switch
Configuration Guide - Security
VLANID aging time
2 153
2 179
Issue 06 (2010–01–08)