R3166-R3206-HP High-End Firewalls Attack Protection Configuration Guide-6PW101

34
Select Firewall > ARP Anti-Attack > Scan from the navigation tree to enter the ARP scanning
configuration page, as shown in Figure 29.
Figure 29 ARP scanning
Table 18 ARP automatic scanning configuration items
Item Descri
p
tion
Interface Select the interface to be configured to perform ARP automatic scanning.
Start IP Address
Specify the start and end IP addresses of the IP address range for ARP
automatic scanning
IMPORTANT:
• Both the start and end IP addresses must be specified or not specified at the
same time.
• The start and end IP addresses must be in the same network segment as the
primary IP address or manually configured secondary IP address of the
interface.
• The start IP address must be lower than or equal to the end IP address.
• With no IP address range specified, the firewall scans the network segment
of the primary IP address of the interface for neighbors.
End IP address
Also scan IP addresses of
dynamic ARP entries
Set whether to scan the IP addresses of the existing dynamic ARP entries.
After the above configuration, click Scan to begin ARP automatic scanning. To abort scanning, click
Interrupt.
Configuring ARP automatic scanning in the CLI
Follow these steps to configure ARP automatic sanning
To do… Use the command…
Remarks
Enter system view system-view —
Enter interface view interface interface-type interface-number —
Enable ARP automatic
scanning
arp scan [ start-ip-address to end-ip-address ] Required