H3C S9512交换机有ARP攻击日志

liulixing351

日志如下：
全部是这样的日志，而且MAC地址是： 0000-5e00-0101


交换机是做的VRRP，两台交换机全部是这样的日志，两台交换机对应的接口是防火墙

G4/1/1接的是天融信的防火墙，防火墙是做的HA（主备模式）

%Jan 16 09:40:13 2017 S9512B DIAGCLI/5/LOG_WARN:Slot=4;
Detect ARP attack from MAC 0000-5e00-0101, VLAN: 104, GigabitEthernet4/1/1 !
%Jan 16 09:17:19 2017 S9512B DIAGCLI/5/LOG_WARN:Slot=4;
Detect ARP attack from MAC 0000-5e00-0101, VLAN: 104, GigabitEthernet4/1/1 !
%Jan 16 08:59:58 2017 S9512B DIAGCLI/5/LOG_WARN:Slot=4;
Detect ARP attack from MAC 0000-5e00-0101, VLAN: 104, GigabitEthernet4/1/1 !
%Jan 16 08:49:39 2017 S9512B DIAGCLI/5/LOG_WARN:Slot=4;
Detect ARP attack from MAC 0000-5e00-0101, VLAN: 104, GigabitEthernet4/1/1 !
%Jan 16 08:39:16 2017 S9512B DIAGCLI/5/LOG_WARN:Slot=4;
Detect ARP attack from MAC 0000-5e00-0101, VLAN: 104, GigabitEthernet4/1/1 !