4 anti-arpscan trust, Anti, Arpscan trust – PLANET WGSW-52040 User Manual

Page 419

Advertising
background image

24-30

3 packets/second.

Command Mode:

Global configuration mode

User Guide:

The threshold of port-based ARP scanning prevention should be larger than the threshold of IP-based ARP scanning

prevention, or, the IP-based ARP scanning prevention will fail.

Example:

Set the threshold of IP-based ARP scanning prevention as 6 packets/second.

Switch(config)#anti-arpscan ip-based threshold 6

24.4 anti-arpscan trust

Command:

anti-arpscan trust [port | supertrust-port]

no anti-arpscan trust [port | supertrust-port]

Function:

Configure a port as a trusted port or a super trusted port;” no anti-arpscan trust <port |

supertrust-port>”command will reset the port as an untrusted port.

Parameters:

None.

Default Settings:

By default all the ports are non- trustful.

Command Mode:

Port configuration mode

User Guide:

If a port is configured as a trusted port, then the ARP scanning prevention function will not deal with this port, even if

the rate of received ARP messages exceeds the set threshold, this port will not be closed, but the non- trustful IP of

this port will still be checked. If a port is set as a super non- trustful port, then neither the port nor the IP of the port will

be dealt with. If the port is already closed by ARP scanning prevention, it will be opened right after being set as a

Advertising