Configuring Arp Restricted Forwarding; Displaying And Maintaining Arp Detection - HP FlexFabric 5700 Series Security Configuration Manual

Step
2. Enter VLAN view.
3. Enable ARP detection.
4. Return to system view.
5. Enable ARP packet validity check
and specify the objects to be
checked.
6. Enter Layer 2 Ethernet interface view
or Layer 2 aggregate interface view.
7. (Optional.) Configure the interface
as a trusted interface excluded from
ARP detection.

Configuring ARP restricted forwarding

NOTE:
ARP restricted forwarding does not apply to ARP packets with multiport MAC as their destination MAC
addresses.
ARP restricted forwarding controls the forwarding of ARP packets that are received on untrusted
interfaces and have passed user validity check as follows:
If the packets are ARP requests, they are forwarded through the trusted interface.
•
If the packets are ARP replies, they are forwarded according to their destination MAC address. If no
•
match is found in the MAC address table, they are forwarded through the trusted interface.
Configure user validity check before you configure ARP restricted forwarding.
To enable ARP restricted forwarding:
Step
1. Enter system view.
2. Enter VLAN view.
3. Enable ARP restricted forwarding.

Displaying and maintaining ARP detection

Execute display commands in any view and reset commands in user view.
Task
Display the VLANs enabled with
ARP detection.
Display the ARP detection statistics.
Command
vlan vlan-id
arp detection enable
quit
arp detection validate
{ dst-mac | ip | src-mac }
*
interface interface-type
interface-number
arp detection trust
Command
system-view
vlan vlan-id
arp restricted-forwarding enable
Command
display arp detection
display arp detection statistics [ interface interface-type
interface-number ]
366
Remarks
N/A
By default, ARP detection is disabled.
N/A
By default, ARP packet validity check
is disabled.
N/A
By default, an interface is untrusted.
Remarks
N/A
N/A
By default, ARP restricted
forwarding is disabled.