HP 4800G Series Configuration Manual page 1430

1 ARP Attack Protection Configuration······································································································1-1
ARP Attack Protection Overview ············································································································1-1
ARP Attack Protection Configuration Task List ······················································································1-1
Configuring ARP Defense Against IP Packet Attacks ············································································1-2
Introduction······································································································································1-2
Configuring ARP Source Suppression ····························································································1-2
Enabling ARP Black Hole Routing ··································································································1-3
Displaying and Maintaining ARP Source Suppression ···································································1-3
Configuring ARP Packet Rate Limit ········································································································1-3
Introduction······································································································································1-3
Configuration Procedure··················································································································1-3
Configuring Source MAC Address Based ARP Attack Detection···························································1-3
Introduction······································································································································1-3
Configuration Procedure··················································································································1-4
Displaying and Maintaining Source MAC Address Based ARP Attack Detection···························1-4
Configuring ARP Packet Source MAC Address Consistency Check ·····················································1-4
Introduction······································································································································1-4
Configuration Procedure··················································································································1-5
Configuring ARP Active Acknowledgement ····························································································1-5
Introduction······································································································································1-5
Configuring the ARP Active Acknowledgement Function ·······························································1-5
Configuring ARP Detection ·····················································································································1-5
Introduction to ARP Detection ·········································································································1-6
Enabling ARP Detection Based on DHCP Snooping Entries/802.1x Security Entries/Static IP-to-MAC
Bindings···········································································································································1-6
Configuring ARP Detection Based on Specified Objects ································································1-8
Displaying and Maintaining ARP Detection·····················································································1-9
ARP Detection Configuration Example I ·························································································1-9
ARP Detection Configuration Example II ······················································································1-11
Table of Contents
i