The arp anti-attack check user-bind alarm threshold command sets the alarm threshold for ARP packets discarded by DAI.
The undo arp anti-attack check user-bind alarm threshold command restores the default alarm threshold for ARP packets discarded by DAI.
By default, the alarm threshold for ARP packets discarded by DAI is 100 packets.
arp anti-attack check user-bind alarm threshold threshold
undo arp anti-attack check user-bind alarm threshold
| Parameter | Description | Value |
|---|---|---|
| threshold | Specifies the alarm threshold for the ARP packets discarded by DAI. | The value is an integer that ranges from 1 to 1000. |
System view, Ethernet interface view, GE interface view, XGE interface view, 25GE interface view, 40GE interface view, 100GE interface view, MultiGE interface view, port group view, Eth-Trunk interface view
Usage Scenario
You can use this command to set the alarm threshold for ARP packets discarded by DAI. After the alarm threshold is set, the device sends an alarm when the number of ARP packets discarded by DAI exceeds this threshold.
Prerequisites
DAI has been enabled using the arp anti-attack check user-bind enable command in the interface view, and the alarm function for ARP packets discarded by DAI has been enabled using the arp anti-attack check user-bind alarm enable command.
Precautions
The arp anti-attack check user-bind alarm threshold command takes effect in the system view only when DAI and the alarm function for ARP packets discarded by DAI are enabled on the interface. The global alarm threshold takes effect on all interfaces enabled with the two functions.
If the alarm thresholds are set in the interface view and system view, the alarm threshold configured in the interface view takes effect. If the alarm threshold on an interface is not configured, the global alarm threshold is used.
# Set the alarm threshold for ARP packets discarded by DAI on GE0/0/1 to 200.
<HUAWEI> system-view [HUAWEI] interface gigabitethernet 0/0/1 [HUAWEI-GigabitEthernet0/0/1] arp anti-attack check user-bind enable [HUAWEI-GigabitEthernet0/0/1] arp anti-attack check user-bind alarm enable [HUAWEI-GigabitEthernet0/0/1] arp anti-attack check user-bind alarm threshold 200