XGS-5240-Series User Manual

Configuration Guide of XGS-5240-Series
32-5
192.168.1.100/24), and all the other ports of SWITCH A are connected to common PC. The
following configuration can prevent ARP scanning effectively without affecting the normal
operation of the system.
SWITCH A configuration task sequence:
SwitchA(config)#anti-arpscan enable
SwitchA(config)#anti-arpscan recovery time 3600
SwitchA(config)#anti-arpscan trust ip 192.168.1.100 255.255.255.0
SwitchA(config)#interface ethernet1/2
SwitchA (Config-If-Ethernet1/2)#anti-arpscan trust port
SwitchA (Config-If-Ethernet1/2)#exit
SwitchA(config)#interface ethernet1/19
SwitchA (Config-If-Ethernet1/19)#anti-arpscan trust supertrust-port
Switch A(Config-If-Ethernet1/19)#exit
SWITCHB configuration task sequence:
Switch B(config)# anti-arpscan enable
SwitchB(config)#interface ethernet1/1
SwitchB(Config-If-Ethernet1/1)#anti-arpscan trust port
SwitchB(Config-If-Ethernet1/1)exit
32.4 ARP Scanning Prevention Troubleshooting Help
 ARP scanning prevention is disabled by default. After enabling ARP scanning prevention,
users can enable the debug switch, “debug anti-arpscan”, to view debug information.