3Com 4500G Family Configuration Manual page 771

1 ARP Attack Protection Configuration······································································································1-1
ARP Attack Protection Overview ············································································································1-1
ARP Attack Protection Configuration Task List ······················································································1-1
Configuring ARP Defense Against IP Packet Attacks ············································································1-2
Introduction······································································································································1-2
Configuring ARP Source Suppression ····························································································1-2
Enabling ARP Black Hole Routing ··································································································1-3
Displaying and Maintaining ARP Source Suppression ···································································1-3
Configuring ARP Packet Rate Limit ········································································································1-3
Introduction······································································································································1-3
Configuration Procedure··················································································································1-3
Configuring Source MAC Address Based ARP Attack Detection···························································1-4
Introduction······································································································································1-4
Configuration Procedure··················································································································1-4
Displaying and Maintaining Source MAC Address Based ARP Attack Detection···························1-5
Configuring ARP Packet Source MAC Address Consistency Check ·····················································1-5
Introduction······································································································································1-5
Configuration Procedure··················································································································1-5
Configuring ARP Active Acknowledgement ····························································································1-5
Introduction······································································································································1-5
Configuring the ARP Active Acknowledgement Function ·······························································1-5
Configuring ARP Detection ·····················································································································1-6
Introduction to ARP Detection ·········································································································1-6
Enabling ARP Detection Based on DHCP Snooping Entries/802.1x Security Entries/Static IP-to-MAC
Bindings···········································································································································1-6
Configuring ARP Detection Based on Specified Objects ································································1-9
Displaying and Maintaining ARP Detection·····················································································1-9
ARP Detection Configuration Example I ·······················································································1-10
ARP Detection Configuration Example II ······················································································1-11
Table of Contents
i