R21xx-HP FlexFabric 11900 Security Command Reference

167
In IRF mode:
display arp source-mac { chassis chassis-number slot slot-number | interface interface-type interface
number }
Views
Any view
Predefined user roles
network-admin
network-operator
Parameters
interface interface-type interface-number: Displays ARP attack entries detected on the specified
interface.
slot slot-number: Displays ARP attack entries detected on the specified card. The slot-number argument
specifies the slot number of the card. (In standalone mode.)
chassis chassis-number slot slot-number: Displays ARP attack entries detected on the specified card of an
IRF member device. The chassis-number argument specifies the ID of the IRF member device. The
slot-number argument specifies the slot number of the card. (In IRF mode.)
Examples
# Display the ARP attack entries detected on the card in slot 3 by source MAC address based ARP attack
detection.
<Sysname> display arp source-mac slot 3
Source-MAC VLAN ID Interface Aging-time
23f3-1122-3344 4094 XGE3/0/1 10
23f3-1122-3355 4094 XGE3/0/2 30
23f3-1122-33ff 4094 XGE3/0/3 25
23f3-1122-33ad 4094 XGE3/0/4 30
23f3-1122-33ce 4094 XGE3/0/5 2
ARP packet source MAC consistency check
commands
arp valid-check enable
Use arp valid-check enable to enable ARP packet source MAC address consistency check on the
gateway.
Use undo arp valid-check enable to disable ARP packet source MAC address consistency check.
Syntax
arp valid-check enable
undo arp valid-check enable
Default
ARP packet source MAC address consistency check is disabled.