Configuring Arp Filtering; Configuration Guidelines; Configuration Procedure - HP 3600 v2 Series Configuration Manual

Hide thumbs Also See for 3600 v2 Series:
Table of Contents

Advertisement

Figure 121 Network diagram

Configuration procedure

# Configure ARP gateway protection on Switch B.
<SwitchB> system-view
[SwitchB] interface ethernet 1/0/1
[SwitchB-Ethernet1/0/1] arp filter source 10.1.1.1
[SwitchB-Ethernet1/0/1] quit
[SwitchB] interface ethernet 1/0/2
[SwitchB-Ethernet1/0/2] arp filter source 10.1.1.1
After the configuration is complete, Switch B will discard the ARP packets whose source IP address is that
of the gateway.

Configuring ARP filtering

To prevent gateway spoofing and user spoofing, the ARP filtering feature controls the forwarding of ARP
packets on a port.
The port checks the sender IP and MAC addresses in a received ARP packet against configured ARP
filtering entries. If a match is found, the packet is handled normally. If not, the packet is discarded.

Configuration guidelines

Follow these guidelines when you configure ARP filtering:
You can configure up to eight ARP filtering entries on a port.
Commands arp filter source and arp filter binding cannot be both configured on a port.
If ARP filtering works with ARP detection, MFF, and ARP snooping, ARP filtering applies first.
Configuration procedure
To configure ARP filtering:
390

Advertisement

Table of Contents
loading

Table of Contents