HP 6125G HP 6125G & 6125G/XG Blade Switches Security Command Reference - Page 265
arp anti-attack source-mac threshold
View all HP 6125G manuals
Add to My Manuals
Save this manual to your list of manuals |
Page 265 highlights
Parameters mac-address&: Specifies a MAC address list. The mac-address argument indicates a protected MAC address in the format H-H-H. & indicates the number of protected MAC addresses that you can configure. Description Use arp anti-attack source-mac exclude-mac to configure protected MAC addresses that are excluded from ARP packet detection. Use undo arp anti-attack source-mac exclude-mac to remove the configured protected MAC addresses. By default, no protected MAC address is configured. If no MAC address is specified in the undo arp anti-attack source-mac exclude-mac command, all the configured protected MAC addresses are removed. Examples # Configure a protected MAC address. system-view [Sysname] arp anti-attack source-mac exclude-mac 2-2-2 arp anti-attack source-mac threshold Syntax arp anti-attack source-mac threshold threshold-value View undo arp anti-attack source-mac threshold System view Default level 2: System level Parameters threshold-value: Specifies the threshold for source MAC address based ARP attack detection, in the range of 10 to 100. Description Use arp anti-attack source-mac threshold to configure the threshold for source MAC address based ARP attack detection. If the number of ARP packets sent from a MAC address within five seconds exceeds this threshold, the device considers this an attack. Use undo arp anti-attack source-mac threshold to restore the default. By default, the threshold for source MAC address based ARP attack detection is 50. Examples # Configure the threshold for source MAC address based ARP attack detection as 30. system-view [Sysname] arp anti-attack source-mac threshold 30 256