Configuring ARP Flood Attack Defense

Procedure

1. In the user view, access the system view.

   system-view

2. Configure interface-based ARP flood attack defense.

   firewall defend arp-flood interface { interface-type interface-number | all } [ max-rate max-rate-number ]

   max-rate-number is an integer ranging from 1 to 65535, in pps.

   If max-rate is not specified, the default value (1000 pps) is used to limit the maximum rate.

   If the rate of the ARP packets received by an interface exceeds max-rate-number, excess packets are discarded. If all is set, the threshold applies to all interfaces.