[x]

Configuring ARP attack protection > Configuring ARP packet source MAC consistency check

 

 Next

Configuring ARP packet source MAC consistency check

This feature enables a gateway to filter out ARP packets whose source MAC address in the Ethernet header is different from the sender MAC address in the message body, so that the gateway can learn correct ARP entries.

To enable ARP packet source MAC address consistency check:

Step

Command

Remarks

1. Enter system view.

system-view

N/A

2. Enable ARP packet source MAC address consistency check.

arp anti-attack valid-check enable

Disabled by default.

prev

 

up

 next

Source MAC-based ARP attack detection configuration example 

home

 Configuring ARP active acknowledgement

© Copyright 2016 Hewlett Packard Enterprise Development LP