ARP packet source MAC address consistency check
configuration commands
arp anti-attack valid-check enable
Syntax
arp anti-attack valid-check enable
undo arp anti-attack valid-check enable
View
System view
Default level
2: System level
Parameters
None
Description
Use the arp anti-attack valid-check enable command to enable ARP packet source MAC address
consistency check on the gateway. After you execute this command, the gateway device can filter out ARP
packets with the source MAC address in the Ethernet header different from the sender MAC address in
the ARP message.
Use the undo arp anti-attack valid-check enable command to restore the default.
By default, ARP packet source MAC address consistency check is disabled.
Examples
# Enable ARP packet source MAC address consistency check.
<Sysname> system-view
[Sysname] arp anti-attack valid-check enable
ARP active acknowledgement configuration
commands
arp anti-attack active-ack enable
Syntax
arp anti-attack active-ack enable
undo arp anti-attack active-ack enable
View
System view
Default level
2: System level
321