ARP attack protection tasks at a glance

All ARP attack protection tasks are optional.

• Preventing flood attacks

  • Configuring unresolvable IP attack protection

  • Configuring ARP packet rate limit

  • Configuring source MAC-based ARP attack detection

• Preventing user and gateway spoofing attacks

  • Configuring ARP packet source MAC consistency check

  • Configuring ARP active acknowledgement

  • Configuring authorized ARP

  • Example: Configuring authorized ARP on a DHCP relay agent

  • Configuring ARP attack detection

  • Configuring ARP packet validity check

  • Configuring ARP restricted forwarding

  • Ignoring ingress ports of ARP packets during user validity check

  • Enabling ARP attack detection logging

  • Configuring ARP scanning and fixed ARP

  • Configuring ARP gateway protection

  • Example: Configuring ARP gateway protection

  • Configuring ARP filtering

  • Configuring ARP sender IP address checking