The ARP entry limiting function controls the number of dynamic ARP entries that a gateway interface can learn. By default, the number of dynamic ARP entries that an interface can learn is the same as the default number of ARP entries supported by the device. After the ARP entry limiting function is deployed, if the number of dynamic ARP entries that a specified interface learned reaches the maximum, the interface cannot learn any more dynamic ARP entries. This prevents ARP entries from being exhausted when a host connecting to this interface initiates ARP attacks.