R2511-HP MSR Router Series Security Command Reference(V5)

468
arp anti-attack source-mac aging-time
Use arp anti-attack source-mac aging-time to configure the age time for source MAC-based ARP attack
detection entries.
Use undo arp anti-attack source-mac aging-time to restore the default.
Syntax
arp anti-attack source-mac aging-time time
undo arp anti-attack source-mac aging-time
Default
The age time for ARP attack entries is 300 seconds (5 minutes).
Views
System view
Default command level
2: System level
Parameters
time: Specifies the age time for ARP attack entries, in the range of 60 to 6000 seconds.
Examples
# Set the age time for ARP attack entries to 60 seconds.
<Sysname> system-view
[Sysname] arp anti-attack source-mac aging-time 60
arp anti-attack source-mac exclude-mac
Use arp anti-attack source-mac exclude-mac to exclude specific MAC addresses from source
MAC-based ARP attack detection.
Use undo arp anti-attack source-mac exclude-mac to remove the specified MAC addresses.
Syntax
arp anti-attack source-mac exclude-mac mac-address&<1-n>
undo arp anti-attack source-mac exclude-mac [ mac-address&<1-n> ]
Default
No MAC address is excluded from source MAC-based ARP attack detection.
Views
System view
Default command level
2: System level
Parameters
mac-address&<1-n>: Specifies a MAC address list. The mac-address argument indicates an excluded
MAC address in the format H-H-H. &<1-n> indicates the number of protected MAC addresses that you
can exclude. The value range for the n argument is 1 to 64.