Enabling Arp Detection Logging; Displaying And Maintaining Arp Detection; User Validity Check Configuration Example - HP FlexNetwork 10500 Series Security Configuration Manual

To enable ARP restricted forwarding:
Step
1. Enter system view.
2. Enter VLAN view.
3. Enable ARP restricted forwarding.

Enabling ARP detection logging

The ARP detection logging feature enables a device to generate ARP detection log messages when
illegal ARP packets are detected. An ARP detection log message contains the following information:
1. Receiving interface of the ARP packets.
2. Sender IP address.
3. Total number of dropped ARP packets.
To enable ARP detection logging:
Step
1. Enter system view.
2. Enable ARP detection
logging.

Displaying and maintaining ARP detection

Execute display commands in any view and reset commands in user view.
Task
Display the VLANs enabled with
ARP detection.
Display the ARP detection
statistics.
Clear the ARP detection statistics.

User validity check configuration example

Network requirements
As shown in
entries for connected hosts.
Command
system-view
arp detection log enable
Figure 128, configure Switch B to perform user validity check based on 802.1X security
Command
system-view
vlan vlan-id
arp restricted-forwarding
enable
Command
display arp detection
display arp detection statistics [ interface interface-type
interface-number ]
reset arp detection statistics [ interface interface-type
interface-number ]
440
Remarks
N/A
N/A
By default, ARP restricted
forwarding is disabled.
Remarks
N/A
By default, ARP detection logging
is disabled.