ARP virus solution for Cisco routers and H3C switching devices

Cisco Switch:
Show logging on the central switch found the following log
Apr 18 10:24:16.265: %IP-4-DUPADDR: Duplicate address 172.30.30.62 on Vlan711, sourced by 0009.6b84.189e; It means there is an ARP virus.
2. Execute conf t, mac-address static mac address vlan id drop;
3. The host with ARP virus is processed and then executed on the central switch.
no mac-address static mac address vlan id drop, so that the host can access network resources.
4. Problem solving

H3C switch:
Dis log found the following information:
%Apr 30 07:43:18:753 2000 Longjing ARP/3/DUPIFIP:Duplicate address 192.168.1.1 o
n interface Vlan-interface101, sourced by 001b-b970-266d

<Longjing>dis mac-address 0016-e67c-7c9f
I found that the mac came from g1/0/4


Enter this interface:
interface GigabitEthernet1/0/4
mac-address blackhole 001b-b970-266d vlan 101

Then find the machine to unplug the network cable to prevent viruses, and then cancel the restrictions under this interface
interface GigabitEthernet1/0/4
undo mac-address blackhole 001b-b970-266d vlan 101