No relevant resource is found in the selected language.

This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy>Search

Reminder

To have a better experience, please upgrade your IE browser.

upgrade

Fat AP and Cloud AP V200R010C00 Command Reference

Rate and give feedback:
Huawei uses machine translation combined with human proofreading to translate this document to different languages in order to help you better understand the content of this document. Note: Even the most advanced machine translation cannot match the quality of professional translators. Huawei shall not bear any responsibility for translation accuracy and it is recommended that you refer to the English document (a link for which has been provided).
arp anti-attack check user-bind enable

arp anti-attack check user-bind enable

Function

The arp anti-attack check user-bind enable command enables dynamic ARP inspection (DAI).

The undo arp anti-attack check user-bind enable command disables DAI.

By default, DAI is disabled.

Format

arp anti-attack check user-bind enable

undo arp anti-attack check user-bind enable

Parameters

None

Views

VAP profile view

Default Level

2: Configuration level

Usage Guidelines

DAI allows an RU to detect the ARP Request and Reply packets transmitted on the VAPs of the RU, to discard invalid and attack ARP packets, and to send an alarm to the connected Central AP. This function prevents ARP packets of unauthorized users from accessing the external network through the RU, protecting authorized users against interference or spoofing, and protecting the RU.

  • Invalid ARP packets: The source IP and MAC addresses of ARP Request and Reply packets do not match.
  • Attack ARP packets: When an RU receives a large number of consecutive ARP packets and the number of ARP packets exceeds the ARP attack alarm threshold, an ARP attack occurs.

Example

# Enable DAI.

<Huawei> system-view
[Huawei] wlan 
[Huawei-wlan-view] vap-profile name vap1
[Huawei-wlan-vap-prof-vap1] arp anti-attack check user-bind enable  
Related Topics
Translation
Download
Updated: 2019-11-21

Document ID: EDOC1100064352

Views: 202173

Downloads: 122

Average rating:
This Document Applies to these Products
Related Version
Related Documents
Share
Previous Next