D-Link DES-7200 Cli Reference Manual page 1002

Chapter 53 NFPP Configuration Commands
Examples
Related
commands
53.1.6 arp-guard scan-threshold
Use this command to scan the arp-guard threshold.
53-6
slowly on condition that a large number of attack pack
ets exist when the number of hardware isolated users
exceeds 127.
2. The upper limit of the table memory occupied is 1M
B. It will prompt "%ARPGUARD-4-MEM_LIMIT:user tabl
e's size reached limit 1MB."to remind the administrator
of this event.
3. A policy will be set to the hardware when isolating t
he attackers. It prompts "%ARPGUARD-4-ISOLATE_FA
ILED: failed to isolate ARP DoS attacker."to inform the
administrator of insufficient hardware resources.
4. It prompts "%ARPGUARD-4-NO_MEMORY: failed to
alloc memory‖ to inform the administrator of this even
t.
5. It is worth mentioning that in order to prevent the fr
equent printing from exhausting the CPU memory, you
shall limit the message rate by printing the messages
at 30s interval.
DES-7210(config)# arp-guard attack-threshold 2 per-src-ip
DES-7210(config)# arp-guard attack-threshold 3 per-src-mac
DES-7210(config)# arp-guard attack-threshold 50 per-port
Command Description
show
arp-guard View the arp-guard configuration.
configuration
clear
arp-guard Clear the arp-guard users.
users
show
Show the arp-guard users.
arp-guard
users
DES-7200 CLI Reference Guide