Debugging Arp Packets; Enabling Log And Alarm Functions For Potential Attacks - Huawei Quidway S3700 Series Configuration Manual

Quidway S3700 Series Ethernet Switches
Configuration Guide - Security
Context
Statistics cannot be restored after being cleared. So, confirm the action before you run the
command.
To clear the statistics on discarded ARP packets, run the following commands in the user view.
Procedure
l
----End

4.6.4 Debugging ARP Packets

Context
Debugging affects the performance of the system. So, after debugging, run the undo debugging
all command to disable it immediately.
If a running fault occurs, run the following debugging commands in the user view to locate the
fault.
Procedure
l
l
----End

4.6.5 Enabling Log and Alarm Functions for Potential Attacks

Procedure
Step 1 Run:
system-view
The system view is displayed.
Step 2 Run:
arp anti-attack log-trap-timer time
Issue 01 (2011-07-15)
CAUTION
Run the reset arp anti-attack statistics rate-limit command to clear the statistics on the
ARP packets discarded because the transmission rate exceeds the limit.
CAUTION
Run the debugging arp packet [ slot slot-id | interface interface-type interface-number ]
command to debug ARP packets.
Run the debugging arp process [ slot slot-id | interface interface-type interface-
number ] command to debug the processing of ARP packets.
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
4 ARP Security Configuration
159