R3721-F3210-F3171-HP High-End Firewalls Attack Protection Configuration Guide-6PW101

Configuring ARP automatic scanning in the web interface

NOTE:

• Do not perform other operations when ARP automatic scanning is in progress.

• ARP automatic scanning may take a long time. You can abort the scanning by clicking Interrupt on the

ARP scan page.

Select Firewall > ARP Anti-Attack > Scan from the navigation tree to enter the ARP scanning

configuration page, as shown in Figure 51.

Figure 51 ARP scanning

Table 17 Configuration items

Item Descri

tion

Interface

Select the interface to be configured to perform ARP automatic scanning.

Start IP Address

Specify the start and end IP addresses of the IP address range for ARP automatic

scanning.

To reduce the scanning time, you can specify the IP address range for scanning if you

know the IP address range assigned to the neighbors in a LAN. The specified start and

end IP addresses must be in the same network segment as the primary IP address or

manually configured secondary IP address of the interface. If the specified address

range covers multiple network segments of the interface, the source IP address in the

ARP request is the interface address on the smallest network segment

IMPORTANT:

• Both the start and end IP addresses must be specified or not specified at the

same time.

• The start and end IP addresses must be in the same network segment as the

primary IP address or manually configured secondary IP address of the

interface.

• The start IP address must be lower than or equal to the end IP address.

• With no IP address range specified, the firewall scans only the network

segment of the primary IP address of the interface for neighbors. The source IP

address of the sent ARP request is the primary IP address of the interface.

End IP address