ARP packet source mac address consistency check
configuration commands
arp anti-attack valid-check enable
Syntax
arp anti-attack valid-check enable
undo arp anti-attack valid-check enable
View
System view
Default level
2: System level
Parameters
None
Description
Use arp anti-attack valid-check enable to enable ARP packet source MAC address consistency check on
the gateway. After you execute this command, the gateway device can filter out ARP packets with the
source MAC address in the Ethernet header different from the sender MAC address in the ARP message.
Use undo arp anti-attack valid-check enable to restore the default.
By default, ARP packet source MAC address consistency check is disabled.
Examples
# Enable ARP packet source MAC address consistency check.
<Sysname> system-view
[Sysname] arp anti-attack valid-check enable
ARP active acknowledgement configuration
commands
arp anti-attack active-ack enable
Syntax
arp anti-attack active-ack enable
undo arp anti-attack active-ack enable
View
System view
Default level
2: System level
258