Huawei Quidway S3700 Series Configuration Manual page 170

Quidway S3700 Series Ethernet Switches
Configuration Guide - Security
Example
Run the display arp anti-attack configuration all command, and you can view the
configuration of ARP anti-attack.
<Quidway> display arp anti-attack configuration all
ARP anti-attack packet-check function: disable
ARP gateway-duplicate anti-attack function: disabled
ARP anti-attack log-trap-timer: 0 seconds
(The log and trap timer of speed-limit, default is 0 and means disabled.)
ARP anti-attack entry-check mode:
Vlanif
-------------------------------------------------------------------------------
All
-------------------------------------------------------------------------------
ARP rate-limit configuration:
-------------------------------------------------------------------------------
Global configuration:
Interface configuration:
Vlan configuration:
-------------------------------------------------------------------------------
ARP miss rate-limit configuration:
-------------------------------------------------------------------------------
Global configuration:
Interface configuration:
Vlan configuration:
-------------------------------------------------------------------------------
ARP speed-limit for source-MAC configuration:
MAC-address
-------------------------------------------------------------------------------
All
-------------------------------------------------------------------------------
0 specified MAC addresses are configured, spec is 256 items.
ARP speed-limit for source-IP configuration:
IP-address
-------------------------------------------------------------------------------
All
-------------------------------------------------------------------------------
0 specified IP addresses are configured, spec is 256 items.
ARP miss speed-limit for source-IP configuration:
IP-address
-------------------------------------------------------------------------------
All
-------------------------------------------------------------------------------
0 specified IP addresses are configured, spec is 256 items.
Run the display arp anti-attack gateway-duplicate item command, and you can view
information about bogus gateway address attack on the network.
<Quidway> display arp anti-attack gateway-duplicate item
interface
-------------------------------------------------------------------------------
GigabitEthernet0/0/1
GigabitEthernet0/0/1
-------------------------------------------------------------------------------
There are 2 records in gateway conflict table
Issue 01 (2011-07-15)
Mode
disabled
suppress-rate(pps)(rate=0 means function disabled)
0
suppress-rate(pps)(rate=0 means function disabled)
5
suppress-rate(pps)(rate=0 means function disabled)
5
IP address
2.1.1.1
2.1.1.1
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
4 ARP Security Configuration
MAC address VLANID
0000-0000-0002 2
0000-0000-0004 2
aging time
150
160
157