F3726, F3211, F3174, R5135, R3816-HP Firewalls and UTM Devices Attack Protection Command Reference-6PW100

Default command level

2: System level

Parameters

|: Filters command output by specifying a regular expression. For more information about regular

expressions, see Getting Started Guide.

begin: Displays the first line that matches the specified regular expression and all lines that follow.

exclude: Displays all lines that do not match the specified regular expression.

include: Displays all lines that match the specified regular expression.

regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters.

Examples

# Display information about the current ARP source suppression configuration.

<Sysname> display arp source-suppression

ARP source suppression is enabled

Current suppression limit: 100

Current cache length: 16

Table 7 Command output

Field Descri

tion

ARP source suppression is

enabled

The ARP source suppression function is enabled.

Current suppression limit

Maximum number of packets with the same source IP address but

unresolvable destination IP addresses that the device can receive in five

seconds.

Current cache length Size of cache used to record source suppression information.

Source MAC based ARP attack detection

configuration commands

The following matrix shows the feature and hardware compatibility:

Hardware Source MAC based ARP attack detection

com

atible

F1000-A-EI/F1000-S-EI Yes

F1000-E No

F5000 No

Firewall module No

U200-A Yes

U200-S Yes