Chapter 8 Arp Spoofing Prevention Commands - D-Link xStack Reference Manual

xStack® DGS-3620 Series Layer 3 Managed Stackable Gigabit Switch CLI Reference Guide
Chapter 8 ARP Spoofing
config arp_spoofing_prevention [add gateway_ip <ipaddr> gateway_mac <macaddr> ports
[<portlist> | all] | delete gateway_ip <ipaddr>]
show arp_spoofing_prevention
8-1 config arp_spoofing_prevention
Description
The user can configure the spoofing prevention entry to prevent spoofing of MAC for the protected
gateway. When an entry is created, those ARP packets whose sender IP matches the gateway IP
of an entry, but either its sender MAC field or source MAC field does not match the gateway MAC
of the entry will be dropped by the system.
Format
config arp_spoofing_prevention [add gateway_ip <ipaddr> gateway_mac <macaddr> ports
[<portlist> | all] | delete gateway_ip <ipaddr>]
Parameters
add gateway_ip - Specifies a gateway IP to be added.
<ipaddr> - Enter the IP address.
gateway_mac - Specifies a gateway MAC to be configured.
<macaddr> - Enter the MAC address.
ports – Specify the ports.
<portlist> - Enter a range of ports to be configured.
all - Specifies all ports to be configured.
delete gateway_ip - Specifies a gateway IP to be deleted.
<ipaddr> - Enter the IP address.
Restrictions
Only Administrator, Operator and Power-User level users can issue this command.
Example
To configure the prevent IP spoofing attack:
DGS-3620-28SC:admin#config arp_spoofing_prevention add gateway_ip
10.254.254.251 gateway_mac 00-00-00-11-11-11 ports 1-2
Command: config arp_spoofing_prevention add gateway_ip 10.254.254.251
gateway_mac 00-00-00-11-11-11 ports 1-2
Success.
DGS-3620-28SC:admin#
Prevention Commands
150