H3C Technologies H3C WX6000 Series Access Controllers - Manual (Page 171)

23-5
ARP packet source MAC address consistency check
This feature enables a gateway device to filter out ARP packets with the source MAC address in the
Ethernet header different from the sender MAC address in the ARP message, so that the gateway
device can learn correct ARP entries.
Note that ARP detection also checks source MAC address consistency of ARP packets, but it is
enabled on an access device to detect only ARP packets sent to it.
Configuring Other ARP Attack Defense Functions
Select Network > ARP Anti-Attack from the navigation tree, click the Advanced Configuration tab to
enter the page shown in Figure 23-3 .
Figure 23-3 Advanced Configuration page
Table 23-2 describes the configuration items of other ARP attack defense functions.