Configuring The Maximum Number Of Dynamic Arp Entries A Vlan Interface Can Learn; Configuring The Maximum Number Of Dynamic Arp Entries That A Vlan Interface Can Learn - H3C S3100 Series Operation Manual

Among the S3100 series Ethernet switches, only the S3100-EI series support ARP Packet Filtering.
Follow these steps to configure ARP packet filtering based on gateway's address:
To do...
Enter system view
Enter Ethernet port view
Configure ARP packet filtering
based on the gateway's IP
address
Configure ARP packet filtering
based on the gateway's IP and
MAC addresses
The arp filter source and arp filter binding commands are mutually exclusive on an Ethernet port.
That is, you can only configure ARP packet filtering based on gateway's IP address, or based on
gateway's IP and MAC addresses, but not both on an Ethernet port.
Configuring the Maximum Number of Dynamic ARP Entries a VLAN
Interface Can Learn
Introduction
To prevent ARP flood attacks, you can limit the number of ARP entries learned by a VLAN interface on
S3100-EI series Ethernet switches (operating as gateways). That is, you can set the maximum number
of dynamic ARP entries that a VLAN interface can learn. If the number of ARP entries learned by the
VLAN interface exceeds the specified upper limit, the VLAN interface stops learning ARP entries, thus
to avoid ARP flood attacks.
Configuring the Maximum Number of Dynamic ARP Entries that a VLAN Interface
Can Learn
Follow these steps to configure the maximum number of dynamic ARP entries that a VLAN interface
can learn:
To do...
Enter system view
Enter VLAN interface view
Use the command...
system-view
interface interface-type
interface-number
arp filter source ip-address
arp filter binding ip-address
mac-address
Use the command...
system-view
interface vlan-interface
vlan-id
2
Remarks
—
—
Required
Not configured by default.
Required
Not configured by default.
Remarks
—
—