Optional) Configuring The Function Of Discarding Ip Packets With The Same Source And Destination Ip Addresses; Configuring Dhcp To Trigger Arp Learning - Huawei Quidway S3700 Series Configuration Manual

Quidway S3700 Series Ethernet Switches
Configuration Guide - Security
By default, the check items consist of IP address, MAC address, VLAN, and interface. The
packets that do not match the binding table are discarded.
Step 5 (Optional)In the interface view, run:
arp anti-attack check user-bind alarm enable
The alarm function for the discarded ARP packets is enabled.
By default, the alarm function is disabled.
The ARP packets check function cannot be configured on both VLAN and interface by arp anti-
attack check user-bind enable command; otherwise, the ARP packets check alarm is valid.
Step 6 (Optional)In the interface view, run:
arp anti-attack check user-bind alarm threshold threshold
The alarm threshold of the number of ARP packets discarded because they do not match the
binding table is set.
By default, the alarm threshold of the number of ARP packets discarded because they do not
match the binding table is 100.
----End
4.5.7 (Optional) Configuring the Function of Discarding IP Packets
with the Same Source and Destination IP Addresses
Procedure
Step 1 Run:
system-view
The system view is displayed.
Step 2 Run:
ip anti-attack source-ip equals destination-ip drop
The function of discarding IP packets with the same source and destination IP addresses is
enabled.
By default, IP packets with the same source and destination IP addresses are not discarded.
----End

4.5.8 Configuring DHCP to Trigger ARP Learning

Issue 01 (2011-07-15)
NOTE
The mode of checking ARP packets takes no effect for the user host configured with the static binding
table. The user host still checks packets according to the static binding table.
CAUTION
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
4 ARP Security Configuration
155