Checking The Configuration - Huawei Quidway S9300 Configuration Manual

Quidway S9300 Terabit Routing Switch
Configuration Guide - Security
By default, ARP suppression is disabled globally.
Step 3 Run:
arp anti-attack rate-limit limit
The threshold for transmission rate of ARP packets is set.
After the threshold is set, the excessive packets are discarded. By default, the threshold for the
transmission rate of ARP packets is 100 pps.
Step 4 (Optional) Run:
arp anti-attack rate-limit alarm enable
The alarm function for the ARP packets discarded because the transmission rate is exceeded is
enabled.
By default, the alarm function is disabled.
Step 5 (Optional) Run:
arp anti-attack rate-limit alarm threshold threshold
The alarm threshold of the number of ARP packets discarded because the transmission rate is
exceeded is set.
By default, the alarm threshold of discarded ARP packets is 100.
----End

4.5.6 Checking the Configuration

Prerequisite
The configurations of the limitation on ARP transmission rate are complete.
Procedure
l
----End
Example
Run the display arp anti-attack configuration all command, and you can view the
configuration of ARP anti-attack.
<Quidway> display arp anti-attack configuration all
ARP anti-attack entry-check mode: fixed-MAC
ARP gateway-duplicate anti-attack function: enabled
ARP anti-attack log-trap-timer: 30seconds
(The log and trap timer of speed-limit, default is 0 and means disabled.)
ARP speed-limit for source-IP configuration:
IP-address
------------------------------------------------------------------------
10.0.0.1
10.0.0.3
10.0.0.8
2.1.1.10
Issue 01 (2009-07-28)
Run the display arp anti-attack configuration { arp-speed-limit | arpmiss-speed-
limit | all } command to view the configuration of ARP source suppression.
suppress-rate(pps)(rate=0 means function disabled)
200
300
0
1000
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
4 ARP Security Configuration
4-17