Host Defense

Host Defense is designed to send gratuitous ARP packets for different hosts to protect them against ARP attacks. This section describes how to configure Host Defense.

To configure Host Defense, take the following steps:

1. On the Navigation pane, click Configure > Security > ARP Defense to visit the ARP Defense page.
2. On the Task tab in the right pane, click Host Defense to visit the the Host Defense page.
3. Click New. In the Host Defense dialog, configure options.
   • Interface: Specifies an interface that sends gratuitous ARP packets.
   • Excluded port: Specifies an excluded port, i.e., the port that does not send gratuitous ARP packets. Typically it is the port that is connected to the proxied host.
   • IP: Specifies the IP address of the host that uses the device as a proxy.
   • MAC: Specifies the MAC address of the host that uses the device as a proxy.
   • Send rate: Specifies a gratuitous ARP packet send rate. The value range is 1 to 10/sec. The default value is 1.
4. Click OK to save your settings and return to the Host Defense page.
5. Repeat Step 3 and Step 4 to configure gratuitous ARP packets for more hosts. You can configure at most 16 hosts.