Enabling Arp Attack Detection Logging; Displaying And Maintaining Arp Attack Detection - HPE FlexNetwork 10500 Series Security Configuration Manual

Step
3. Enable ARP attack
detection.
4. Return to system view.
5. Enable ARP packet validity
check and specify the
objects to be checked.
6. (Optional.) Enter Layer 2
Ethernet interface view or
Layer 2 aggregate interface
view.
7. (Optional.) Enter Ethernet
service instance view.
8. (Optional.) Configure the AC
as a trusted AC excluded
from ARP attack detection.

Enabling ARP attack detection logging

The ARP attack detection logging feature enables a device to generate ARP attack detection log
messages when illegal ARP packets are detected. An ARP attack detection log message contains
the following information:
1. Receiving interface of the ARP packets.
2. Sender IP address.
3. Total number of dropped ARP packets.
To enable ARP attack detection logging:
Step
1. Enter system view.
2. Enable ARP attack
detection logging.

Displaying and maintaining ARP attack detection

Execute display commands in any view and reset commands in user view.
Task
Display the VLANs enabled with
ARP attack detection.
Display the ARP attack detection
statistics.
Clear the ARP attack detection
statistics.
Command
arp detection enable
quit
arp detection validate { dst-mac
| ip | src-mac } *
interface interface-type
interface-number
service-instance instance-id
arp detection trust
Command
system-view
arp detection log enable
Command
display arp detection
display arp detection statistics [ interface interface-type
interface-number [ service-instance instance-id ] ]
reset arp detection statistics [ interface interface-type
interface-number [ service-instance instance-id ] ]
524
Remarks
By default, ARP attack detection
is disabled.
N/A
By default, ARP packet validity
check is disabled.
N/A
N/A
By default, an AC is untrusted.
Remarks
N/A
By default, ARP attack detection
logging is disabled.