Device Models That Supports Arp Attack Prevention - H3C LS-5100-16P-SI-OVS-H3 Configuration

H3C Low-End Ethernet Switches Configuration Examples
ARP Attack Prevention
Task
Configure
ARP
packet rate
limit
Note:
For detailed information about ARP attack prevention supported by a switch model,
refer to its operation and command manuals.

1.4 Device Models that Supports ARP Attack Prevention

Table 1-3 Device models that supports ARP attack prevention
Device model
S5600 (Release 1602)
S5100-EI (Release 2200)
S5100-SI (Release 2200)
S3600-EI (Release 1602)
To do...
Enter Ethernet port
view
Enable ARP
packet rate limit
Configure the
maximum ARP
packet rate
allowed on the port
Return to system
view
Enable the port
state
auto-recovery
function
Configure the port
state
auto-recovery
interval
Feature
DHCP
snooping
1-8
Chapter 1 ARP Attack Prevention Overview
Use the command...
interface interface-type
interface-number
arp rate-limit enable
arp rate-limit rate
quit
arp protective-down
recover enable
arp protective-down
recover interval interval
ARP attack
detection
Remarks
—
Required
Disabled by
default.
Optional
By default, the
maximum ARP
packet rate allowed
on a port is 15 pps.
—
Optional
Disabled by
default.
Optional
By default, when
the port state
auto-recovery
function is enabled,
the port state
auto-recovery
interval is 300
seconds.
IP static ARP packet
binding rate limit