Displaying And Maintaining Source Mac Address Based Arp Attack Detection; Configuring Arp Packet Source Mac Address Consistency Check; Introduction - 3Com 4510G Configuration Manual

Follow these steps to configure protected MAC addresses:
To do...
Enter system view
Configure protected MAC
addresses
Configuring the aging timer for protected MAC addresses
Follow these steps to configure the aging timer for protected MAC addresses:
To do...
Enter system view
Configure aging timer for
protected MAC addresses
Configuring the threshold
Follow these steps to configure the threshold:
To do...
Enter system view
Configure the threshold

Displaying and Maintaining Source MAC Address Based ARP Attack Detection

To do...
Display attacking
entries detected
A protected MAC address is no longer excluded from detection after the specified aging time expires.

Configuring ARP Packet Source MAC Address Consistency Check

Introduction

This feature enables a gateway device to filter out ARP packets with the source MAC address in the
Ethernet header different from the sender MAC address in the ARP message, so that the gateway
device can learn correct ARP entries.
Use the command...
system-view
arp anti-attack source-mac
exclude-mac mac-address&<1-n>
Use the command...
system-view
arp anti-attack source-mac
aging-time time
Use the command...
system-view
arp anti-attack source-mac threshold
threshold-value
Use the command...
display arp anti-attack source-mac { slot
slot-number | interface interface-type
interface-number }
4-4
Remarks
—
Optional
Not configured by default.
Remarks
—
Optional
Five minutes by default.
Remarks
—
Optional
50 by default.
Remarks
Available in any view