HP VPN Firewall Appliances Attack Protection Command Reference

40
Default command level
2: System level
Parameters
|: Filters command output by specifying a regular expression. For more information about regular
expressions, see Getting Started Guide.
begin: Displays the first line that matches the specified regular expression and all lines that follow.
exclude: Displays all lines that do not match the specified regular expression.
include: Displays all lines that match the specified regular expression.
regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters.
Examples
# Display information about the current ARP source suppression configuration.
<Sysname> display arp source-suppression
ARP source suppression is enabled
Current suppression limit: 100
Current cache length: 16
Table 7 Command output
Field Descri
p
tion
ARP source suppression is
enabled
The ARP source suppression function is enabled.
Current suppression limit
Maximum number of packets with the same source IP address but
unresolvable destination IP addresses that the device can receive in 5
seconds.
Current cache length Size of cache used to record source suppression information.
Source MAC-based ARP attack detection
configuration commands
The following matrix shows the feature and hardware compatibility:
Hardware Com
p
atibilit
y
F1000-A-EI/F1000-S-EI Yes
F1000-E No
F5000 No
F5000-S/F5000-C No
VPN firewall modules No
20-Gbps VPN firewall modules No