Configuring Arp Detection - HP MSR2000 Configuration Manual

<RouterB> system-view
[RouterB] dhcp enable
# Specify the IP addresses of Ethernet 1/1 and Ethernet 1/2.
[RouterB] interface ethernet 1/1
[RouterB-Ethernet1/1] ip address 10.1.1.2 24
[RouterB-Ethernet1/1] quit
[RouterB] interface ethernet 1/2
[RouterB-Ethernet1/2] ip address 10.10.1.1 24
# Enable DHCP relay agent on Ethernet 1/2.
[RouterB-Ethernet1/2] dhcp select relay
# Add the DHCP server 10.1.1.1 to DHCP server group 1.
[RouterB-Ethernet1/2] dhcp relay server-address 10.1.1.1
# Enable authorized ARP.
[RouterB-Ethernet1/2] arp authorized enable
[RouterB-Ethernet1/2] quit
# Enable recording of relay entries on the relay agent.
[RouterB] dhcp relay client-information record
3. Configure Router C:
<RouterC> system-view
[RouterC] ip route-static 10.1.1.0 24 10.10.1.1
[RouterC] interface ethernet 1/2
[RouterC-Ethernet1/2] ip address dhcp-alloc
[RouterC-Ethernet1/2] quit
Verifying the configuration
After Router C obtains an IP address from Router A, display the authorized ARP information on Router B.
[RouterB] display arp all
IP Address
10.10.1.2
The output shows that Router A assigned an IP address 10.10.1.2 to Router C.
Router C must use the IP address and MAC address in the authorized ARP entry to communicate with
Router B. Otherwise, the communication fails. Thus the user validity is ensured.

Configuring ARP detection

NOTE:
This feature is not supported in the current release, and it is reserved for future use.
ARP detection enables access devices to block ARP packets from unauthorized clients to prevent user
spoofing and gateway spoofing attacks. ARP detection does not check ARP packets received from ARP
trusted ports.
ARP detection provides the user validity check, ARP packet validity check, and ARP restricted forwarding
functions.
Type: S-Static D-Dynamic
MAC Address VLAN
0012-3f86-e94c N/A
M-Multiport
Interface
Eth1/2
281
I-Invalid
Aging Type
20 D