R3721-F3210-F3171-HP High-End Firewalls Attack Protection Command Reference-6PW101

1
ARP attack protection configuration commands
Gratuitous ARP configuration commands
arp send-gratuitous-arp
Syntax
arp send-gratuitous-arp [ interval milliseconds ]
undo arp send-gratuitous-arp
View
Layer 3 Ethernet interface view, Layer 3 Ethernet subinterface view, Layer 3 aggregate interface view,
Layer 3 aggregate subinterface view
Default level
2: System level
Parameters
interval milliseconds: Sets the interval at which gratuitous ARP packets are sent, in the range of 200 to
200000 milliseconds. The default value is 2000.
Description
Use arp send-gratuitous-arp to enable periodic sending of gratuitous ARP packets and set the sending
interval for the interface.
Use undo arp send-gratuitous-arp to disable the interface from periodically sending gratuitous ARP
packets.
By default, an interface is disabled from sending gratuitous ARP packets periodically.
This function takes effect only when the link of the enabled interface goes up and an IP address has been
assigned to the interface.
The IP address contained in a gratuitous ARP request can be the VRRP virtual IP address, the primary IP
address or a manually configured secondary IP address of the sending interface only. The primary IP
address can be configured manually or automatically, whereas the secondary IP address must be
configured manually.
If you change the interval for sending gratuitous ARP packets, the configuration is effective at the next
sending interval.
The frequency of sending gratuitous ARP packets may be much lower than is expected if this function is
enabled on multiple interfaces, or each interface is configured with multiple secondary IP addresses, or
a small sending interval is configured in the preceding cases.
Examples
# Enable GigabitEthernet 0/1 to send gratuitous ARP packets every 300 milliseconds.
<Sysname> system-view
[Sysname] interface GigabitEthernet 0/1
[Sysname-GigabitEthernet0/1] arp send-gratuitous-arp interval 300