D-Link DES-7200 Cli Reference Manual page 1003

Hide thumbs Also See for DES-7200:

Table of Contents

DES-7200 CLI Reference Guide

arp-guard scan-threshold pkt-cnt

The scan threshold value.

Global configuration mode.

The attribute of the ARP scan is that the source MAC address of the

link layer is constant while the source IP address is changing, or the

source MAC address and IP address are constant while the

destination IP address is changing. Now DES-7210 products only

support the former ARP scan. If the ARP packets received within 10s

are in accordance with the ARP scan attribute and the packet amount

exceeds the scan-threshold, user with this MAC address is scanning

the ARP packets.

When the ARP scan is detected, it will prompt:

*Dec 27 15:34:16: %ARPGUARD-4-SCAN: ARP scan was detected.

If the administrator wants to view the detailed information, please

execute the show arp-guard scan command. The ARP scan table

only save the latest 256 pieces of records. When the ARP scan table

is full, it will prompt:

*Dec 27 15:34:16: %ARPGUARD-4-SCAN_TABLE_FULL: ARP scan table is

And it prompts the additional TRAP information:

Note that the ARP scan table only save the latest 256 pieces of

records. When the ARP scan table is full, the newest record will

overwrite the oldest one.

DES-7210(config)# arp-guard scan-threshold 20

Chapter 53 NFPP Configuration Commands

MAC=0000.0000.0004,port=Gi4/1,VLAN=1>