Arp Detection Configuration Example Ii - H3C S5120-SI Series Configuration Manual

[SwitchA] arp detection validate dst-mac ip src-mac
After the preceding configurations are completed, when ARP packets arrive at interfaces GigabitEthernet
1/0/1 and GigabitEthernet 1/0/2, their MAC and IP addresses are checked, and then the packets are
checked against the IP-to-MAC binding and finally DHCP snooping entries.

ARP detection configuration example II

Network requirements
As shown in Figure 6:
•
Enable 802.1X on Switch A.
•
Enable ARP detection for VLAN 10 to allow only packets from valid clients to pass.
•
Configure Host A and Host B as local 802.1X access users.
Figure 6 Network diagram for ARP detection configuration
Configuration procedure
•
Add all the ports on Switch A into VLAN 10 (the configuration procedure is not shown).
•
Configure DHCP server (the configuration procedure is not shown).
•
Configure Host A and Host B as 802.1X clients (the configuration procedure is not shown) and
configure them to upload IP addresses for ARP detection.
Configure Switch A
1.
Enable the 802.1X function.
<SwitchA> system-view
[SwitchA] dot1x
[SwitchA] interface GigabitEthernet 1/0/1
[SwitchA-GigabitEthernet1/0/1] dot1x
[SwitchA-GigabitEthernet1/0/1] quit
[SwitchA] interface GigabitEthernet 1/0/2
[SwitchA-GigabitEthernet1/0/2] dot1x
27