Specifications

338
DCS-3950 series Ethernet switch manual
Default：By default all the IP are non-trustful. Default mask is 255.255.255.255
Command mode：Global Mode
User Guide：If a port is configured as a trusted port, then the ARP scanning prevention
function will not deal with this port, even if the rate of received ARP messages exceeds
the set threshold, this port will not be closed. If the port is already closed by ARP
scanning prevention, its traffic will be recovered right immediately.
Example：Set 192.168.1. 0/24 as trusted IP
Switch(Config)#anti-arpscan trust ip 192.168.1.100 255.255.255.0
21.2.2.6 anti-arpscan recovery enable
Command：anti-arpscan recovery enable
no anti-arpscan recovery enable
Function：Enable the automatic recovery function, ‘no anti-arpscan recovery enable’
command will disable the function.
Parameters：None
Default：Enable the automatic recovery function
Command mode：Global Mode
User Guide：If the users want the normal state to be recovered after a while the port is
closed or the IP is disabled, they can configure this function.
Example：Enable the automatic recovery function of the switch.
Switch(Config)#anti-arpscan recovery enable
21.2.2.7 anti-arpscan recovery time <seconds>
Command：anti-arpscan recovery time <seconds>
no anti-arpscan recovery time
Function：Configure automatic recovery time; ‘no anti-arpscan recovery time’ command
resets the automatic recovery time to default value.
Parameters：automatic recovery time, in second ranging from 5 to 86400
Default：300 seconds
Command mode：Global Mode
User Guide: Automatic recovery function should be enabled first.
Example：Set the automatic recovery time as 3600 seconds
Switch(Config)#anti-arpscan recovery time 3600
21.2.2.8 anti-arpscan log enable
Command：anti-arpscan log enable
no anti-arpscan log enable
Function：Enable ARP scanning prevention log function;’ no anti-arpscan log enable’
command will disable this function.
Parameters：None.
Default：Enable ARP scanning prevention log function