Arp Packet Source Mac Consistency Check Commands; Arp Valid-Check Enable; Arp Active Acknowledgement Commands; Arp Active-Ack Enable - H3C MSR Series Command Reference Manual

Comware 7 security

Hide thumbs Also See for MSR Series:

Table of Contents

chassis chassis-number slot slot-number: Specifies a card on an IRF member device. The

chassis-number argument represents the member ID of the IRF member device. The slot-number

argument represents the slot number of the card. If you do not specify a card, this command displays

ARP attack entries for the global active MPU. (Distributed devices in IRF mode.)

# Display the ARP attack entries detected by source MAC-based ARP attack detection.

<Sysname> display arp source-mac

23f3-1122-3344

23f3-1122-3355

23f3-1122-33ff

23f3-1122-33ad

23f3-1122-33ce

ARP packet source MAC consistency check

Use arp valid-check enable to enable ARP packet source MAC address consistency check.

Use undo arp valid-check enable to disable ARP packet source MAC address consistency check.

arp valid-check enable

undo arp valid-check enable

ARP packet source MAC address consistency check is disabled.

Predefined user roles

network-admin

Usage guidelines

Configure this feature on gateways. The gateways can filter out ARP packets whose source MAC

address in the Ethernet header is different from the sender MAC address in the message body.

# Enable ARP packet source MAC address consistency check.

<Sysname> system-view

[Sysname] arp valid-check enable

Use arp active-ack enable to enable the ARP active acknowledgement feature.