User's Manual

Configuration Guide of XGS-5240-Series
32-2
32.2 ARP Scanning Prevention Configuration Task
Sequence
1． Enable the ARP Scanning Prevention function.
2． Configure the threshold of the port-based and IP-based ARP Scanning
Prevention
3． Configure trusted ports
4． Configure trusted IP
5． Configure automatic recovery time
6． Display relative information of debug information and ARP scanning
7． Configure the action after above level-2 threshold.
1. Enable the ARP Scanning Prevention function.
Command
Explanation
Global configuration mode
anti-arpscan enable [ip|port]
no anti-arpscan enable [ip|port]
Enable or disable the ARP Scanning
Prevention function globally.
2. Configure the threshold of the port-based and IP-based ARP Scanning Prevention
Command
Explanation
Global configuration mode
anti-arpscan port-based threshold
<threshold-value>
no anti-arpscan port-based
threshold
Set the threshold of the port-based
ARP Scanning Prevention.
anti-arpscan ip-based {level1|level2} th
reshold <threshold-value>
no anti-arpscan ip-based {level1|level
2} threshold
Set the threshold of the IP-
based ARP
Scanning Prevention.
3. Configure trusted ports
Command
Explanation
Port configuration mode
anti-arpscan trust {port | supertrust-po
rt | iptrust-port}
no anti-arpscan trust {port | supertrus
t-port | iptrust-port}
Set the trust attributes of the ports.