Enabling Arp Black Hole Routing; Displaying And Maintaining Arp Defense Against Ip Packet Attacks; Configuration Example - HP 5500 HI Series Configuration Manual

Enabling ARP black hole routing

Step
1. Enter system view.
2. Enable ARP black hole routing.
Displaying and maintaining ARP defense against IP packet
attacks
Task
Display ARP source suppression
configuration information.

Configuration example

Network requirements
As shown in
20. The two areas connect to the gateway (Device) through an access switch.
A large number of ARP requests are detected in the office area and are considered as the consequence
of an IP flood attack. To prevent such attacks, configure ARP source suppression and ARP black hole
routing.
Figure 117 Network diagram
Host A
Figure 1 17, a LAN contains two areas: an R&D area in VLAN 10 and an office area in VLAN
Gateway
Device
VLAN 10
Host B
R&D
Command
system-view
arp resolving-route enable
Command
display arp source-suppression [ |
{ begin | exclude | include }
regular-expression ]
IP network
ARP attack protection
VLAN 20
Host C
371
Host D
Office
Remarks
N/A
Optional.
Enabled by default.
Remarks
Available in any view