deception arp-request rate

Function

The deception arp-request rate command sets an IP scanning threshold.

The undo deception arp-request rate command restores the default IP scanning threshold.

Format

deception arp-request rate rate-number

undo deception arp-request rate

Parameters

Parameter	Description	Value
rate-number	Specifies an IP scanning threshold.	The value is an integer ranging from 1 to 20000, in "times per 10 seconds".

Views

Deception view

Default Level

2: Configuration level

Usage Guidelines

The default threshold of IP scanning is 10 times per 10 seconds.

If the rate at which a device scans IP addresses on a network reaches the threshold, the DecoySensor considers this behavior as attack behavior. Once the DecoySensor detects that a scanned IP address is offline, it immediately deceives the traffic to the Decoy for further detection.

Example

# Set the IP scanning threshold to 300 times per 10 seconds.

<FW> system-view
[FW] deception
[FW-deception] deception arp-request rate 300