20Configuring protected MAC addressesYou can specify certain MAC addresses, such as that of a gateway or important servers, as protectedMAC addresses. A protected MAC address is excluded from ARP attack detection. It will not trigger analarm or filtering even when it sends more ARP packets than the specified threshold.To configure protected MAC addresses:To do… Use the command… Remarks1. Enter system view system-view —2. Configure protected MACaddressesarp anti-attack source-macexclude-mac mac-address&<1-10>OptionalNot configured by default.Configuring the aging timer for protected MAC addressesWhen its aging timer expires, a protected MAC address stops being protected.To configure the aging timer for protected MAC addresses:To do… Use the command… Remarks1. Enter system view system-view —2. Configure aging timer forprotected MAC addressesarp anti-attack source-macaging-time timeOptionalFive minutes by default..Displaying and maintaining source MAC address based ARPattack detectionTo do… Use the command… RemarksDisplay attacking entries detected display arp anti-attack source-mac [interface interface-type interface-number ]Available in anyviewConfiguring ARP packet rate limitIntroductionThis feature allows you to limit the rate of ARP packets to be delivered to the CPU.Configuring the ARP packet rate limit functionTo configure ARP packet rate limit in Ethernet interface view:
