H3C Technologies H3C SecPath F1000-E - Manual (Page 506)

4
Select Firewall > ARP Anti-Attack > Scan from the navigation tree to enter the ARP scanning
configuration page, as shown in
Figure 12 .
Figure 12 ARP scanning
Table 4 describes the configuration items for ARP automatic scanning.
Table 4 ARP automatic scanning configuration items
Item Description
Interface Select the interface to be configured to perform ARP automatic scanning.
Start IP
Address
End IP
address
Specify the start and end IP addresses of the IP address range for ARP automatic scanning.
To reduce the scanning time, you can specify the IP address range for scanning if you know
the IP address range assigned to the neighbors in a LAN. The specified start and end IP
addresses must be in the same network segment as the primary IP address or manually
configured secondary IP address of the interface. If the specified address range covers
multiple network segments of the interface, the source IP address in the ARP request is the
interface address on the smallest network segment
IMPORTANT:
z Both the start and end IP addresses must be specified or not specified at the same time.
z The start and end IP addresses must be in the same network segment as the primary IP
address or manually configured secondary IP address of the interface.
z The start IP address must be lower than or equal to the end IP address.
z With no IP address range specified, the device scans only the network segment of the
primary IP address of the interface for neighbors. The source IP address of the sent
ARP request is the primary IP address of the interface.
Also scan IP
addresses of
dynamic ARP
entries
Set whether to scan the IP addresses of the existing dynamic ARP entries.
After the above configuration, click Scan to begin ARP automatic scanning. To abort scanning, click
Interrupt.