Arp Packet Source Mac Consistency Check Commands; Arp Valid-Check Enable - HPE FlexFabric 7900 Series Security Command Reference

Views
Any view
Predefined user roles
network-admin
network-operator
mdc-admin
mdc-operator
Parameters
interface interface-type interface-number: Specifies an interface by its type and number.
slot slot-number: Specifies a card by its slot number. If you do not specify a card, this command
displays ARP attack entries for the active MPU.
chassis chassis-number slot slot-number: Specifies a card on an IRF member device. The
chassis-number argument represents the member ID of the IRF member device. The slot-number
argument represents the slot number of the card. If you do not specify a card, this command displays
ARP attack entries for the global active MPU.
Examples
# Display the ARP attack entries detected by source MAC-based ARP attack detection.
<Sysname> display arp source-mac slot 1
Source-MAC
23f3-1122-3344
23f3-1122-3355
23f3-1122-33ff
23f3-1122-33ad
23f3-1122-33ce
ARP packet source MAC consistency check
commands
The ARP packet source MAC address consistency check feature is available in Release 2137 and
later versions.

arp valid-check enable

Use arp valid-check enable to enable ARP packet source MAC address consistency check.
Use undo arp valid-check enable to disable ARP packet source MAC address consistency check.
Syntax
arp valid-check enable
undo arp valid-check enable
Default
ARP packet source MAC address consistency check is disabled.
Views
System view
VLAN ID Interface
4094 FGE1/0/1
4094 FGE1/0/2
4094 FGE1/0/3
4094 FGE1/0/4
4094 FGE1/0/5
287
Aging-time
10
30
25
30
2