Tp-Link T1700G-28TQ V2 — настройка ARP инспекции для защиты сети от атак [100/354]

Превью страниц Страница 100 / 354

Syntax

ip arp inspection trust

no ip arp inspection trust

Command Mode

Interface Configuration Mode

Privilege Requirement

Only Admin, Operator and Power User level users have access to these

commands.

Example

Configure the Gigabit Ethernet ports 1/0/2-5 as the Trusted Port:

T1700G-28TQ(config)#interface range gigabitEthernet 1/0/2-5

T1700G-28TQ(config-if-range)#ip arp inspection trust

12.3 ip arp inspection(interface)

Description

The ip arp inspection command is used to enable the ARP Defend function.

To disable the ARP detection function, please use no ip arp inspection

command. ARP Attack flood produces lots of ARP Packets, which will occupy

the bandwidth and slow the network speed extremely. With the ARP Defend

enabled, the switch can terminate receiving the ARP packets for 300 seconds

when the transmission speed of the legal ARP packet on the port exceeds the

defined value so as to avoid ARP Attack flood.