By configuring strict ARP entry learning in the system view, a device learns only address information carried in the ARP Reply packets corresponding to the ARP Request packets sent by the device. The device does not learn address information carried in the ARP Request packets sent from other devices. Strict ARP entry ensures the security of the device.
By configuring strict ARP entry learning in the interface view, a device learns only address information carried in the ARP Reply packets corresponding to the ARP Request packets sent by the device. The device does not learn address information carried in the ARP Request packets sent from other devices. Strict ARP entry ensures the security of the device.
By configuring interface-based ARP entry restriction, the number of ARP entries that an interface can learn is restricted, which effectively prevents ARP entry overflow and ensures ARP entry security.
Through the log and alarms for potential attacks, the administrator can know the operation of ARP in a real-time manner and make a decision and take effective measures against attacks.