attack

attack

drop-bad-arp-enable

fix-dhcp-enable

no…

poison-check-enable

Description

This command enables firewall settings to protect the network against wired attacks, such as ARP attacks or malformed DHCP packets, and notify the administrator when these attacks are detected.

Syntax

Command/Parameter	Description
drop-bad-arp-enable	Enables the IAP to block the bad ARP request.
fix-dhcp-enable	Enables the IAP to fix the malformed DHCP packets.
poison-check-enable	Enables the IAP to trigger an alert notifying the user about the ARP poisoning that may have been caused by the rogue APs.
no…	Removes the specified configuration parameter.

Usage Guidelines

Use this command to block ARP attacks and to fix malformed DHCP packets.

Example

The following example configures firewall settings to protect the network from Wired attacks:

(Instant AP)(config)# attack

(Instant AP)(ATTACK)# drop-bad-arp-enable

(Instant AP)(ATTACK)# fix-dhcp-enable

(Instant AP)(ATTACK)# poison-check-enable

(Instant AP)(ATTACK)# end

(Instant AP)# commit apply

Command History

Version	Description
Aruba Instant 6.2.1.0-3.3	This command is introduced.

Command Information

IAP Platform	Command Mode
All platforms	Configuration and Attack configuration sub-mode