Alcatel-Lucent 7750 SR OS Service Manual page 733

Description
This command enables anti-spoof filtering and optionally changes the anti-spoof matching type for
the SAP.
The type of anti-spoof filtering defines what information in the incoming packet is used to generate
the criteria to lookup an entry in the anti-spoof filter table. The type parameter (ip, ip-mac) defines
the anti-spoof filter type enforced by the SAP when anti-spoof filtering is enabled.
The no form of the command disables anti-spoof filtering on the SAP.
Default
ip-mac
Parameters
ip — Configures SAP anti-spoof filtering to use only the source IP address in its lookup. If a static
ip-mac — Configures SAP anti-spoof filtering to use both the source IP address and the source MAC
arp-timeout
Syntax arp-timeout seconds
no arp-timeout
Context config>service>ies>interface
config>service>ies>sub-if>grp-if
Description
This command configures the minimum time in seconds an ARP entry learned on the IP interface will
be stored in the ARP table. ARP entries are automatically refreshed when an ARP request or
gratuitous ARP is seen from an IP host, otherwise, the ARP entry is aged from the ARP table. If arp-
timeout is set to a value of zero seconds, ARP aging is disabled.
When the arp-populate and lease-populate commands are enabled on an IES interface, the ARP
table entries will no longer be dynamically learned, but instead by snooping DHCP ACK message
from a DHCP server. In this case the configured arp-timeout value has no effect.
The default value for arp-timeout is 14400 seconds (4 hours).
The no form of this command restores arp-timeout to the default value.
Default
14400 seconds
Parameters
seconds — The minimum number of seconds a learned ARP entry will be stored in the ARP table,
bfd
Syntax bfd transmit-interval [receive receive-interval] [multiplier multiplier]
no bfd
Context config>service>ies>interface
7750 SR OS Services Guide
host exists on the SAP without an IP address specified, the anti-spoof type ip command will fail.
address in its lookup. If a static host exists on the SAP without both the IP address and MAC
address specified, the anti-spoof type ip-mac command will fail. This is also true if the default
anti-spoof filter type of the SAP is ip-mac and the default is not overridden. The anti-spoof type
ip-mac command will also fail if the SAP does not support Ethernet encapsulation.
expressed as a decimal integer. A value of zero specifies that the timer is inoperative and learned
ARP entries will not be aged.
Values
0 — 65535
Internet Enhanced Services
Page 733