User's Manual
371
Chapter 50 Attack Prevention Configuration
Example
Note:
The examples shown in this chapter is only a reference for Filter configuration. Please configure
according to your actual network condition.
50.1 Using Filter ARP to Protect the LAN
As shown in the following figure, configure ARP attack Filter on Switch.
Sets the parameter of Filter. A host sending more than 100 ARP messages in 10s will be taken as an attack
source.
Switch# config
Switch_config# filter period 10
Switch_config# filter threshold arp 100
Sets APR attack filter with 4 ports:
Switch_config# interface range g0/1 – 4
Switch_config_intf# filter arp
Sets Raw mode and enable Filter:
Switch_config_intf# exit
Switch_config# filter mode raw
Switch_config# filter enable