3 anti-arpscan ip-based threshold, 4 anti-arpscan trust, Anti – PLANET XGS3-24040 User Manual
Page 289: Arpscan ip, Based threshold, Arpscan trust
18-2
User Guide:
the threshold of port-based ARP scanning prevention should be larger than the threshold of
IP-based ARP scanning prevention, or, the IP-based ARP scanning prevention will fail.
Example:
Set the threshold of port-based ARP scanning prevention as 10 packets /second.
Switch(config)#anti-arpscan port-based threshold 10
18.3 anti-arpscan ip-based threshold
Command:
anti-arpscan ip-based threshold
no anti-arpscan ip-based threshold
Function:
Set the threshold of received messages of the IP-based ARP scanning prevention. If the rate of
received ARP messages exceeds the threshold, the IP messages from this IP will be blocked. The
unit is packet/second. The “no anti-arpscan ip-based threshold” command will reset the default
value, 3 packets/second.
Parameters:
rate threshold, ranging from 1 to 200.
Default Settings:
3 packets/second.
Command Mode:
Global configuration mode
User Guide:
The threshold of port-based ARP scanning prevention should be larger than the threshold of
IP-based ARP scanning prevention, or, the IP-based ARP scanning prevention will fail.
Example:
Set the threshold of IP-based ARP scanning prevention as 6 packets/second.
Switch(config)#anti-arpscan ip-based threshold 6
18.4 anti-arpscan trust
Command:
anti-arpscan trust [port | supertrust-port]
no anti-arpscan trust [port | supertrust-port]
Function:
Configure a port as a trusted port or a super trusted port;” no anti-arpscan trust
supertrust-port>”command will reset the port as an untrusted port.
Parameters:
None.
Default Settings:
By default all the ports are non- trustful.