Configuration Procedure; Configuration Example - H3C S5830V2 Security Configuration Manual

Do not configure both the arp filter source and arp filter binding commands on an interface.
•
• If ARP filtering works with ARP detection and ARP snooping, ARP filtering applies first.

Configuration procedure

To configure ARP filtering:
Step
1. Enter system view.
2. Enter Ethernet interface or
aggregate interface view.
3. Enable ARP filtering and
configure a permitted entry.

Configuration example

Network requirements
As shown in
respectively. The IP and MAC addresses of Host B are 10.1.1.3 and 000f-e349- 1 234.
Configure ARP filtering on Ten-GigabitEthernet 1/0/1 and Ten-GigabitEthernet 1/0/2 of Switch B to
permit ARP packets from the two hosts only.
Figure 72 Network diagram
Configuration procedure
# Configure ARP filtering on Switch B.
<SwitchB> system-view
[SwitchB] interface ten-gigabitethernet 1/0/1
[SwitchB-Ten-GigabitEthernet1/0/1] arp filter binding 10.1.1.2 000f-e349-1233
[SwitchB-Ten-GigabitEthernet1/0/1] quit
[SwitchB] interface ten-gigabitethernet 1/0/2
Command
system-view
interface interface-type interface-number
arp filter binding ip-address
mac-address
Figure 72, the IP and MAC addresses of Host A are 10.1.1.2 and 000f-e349- 1 233
225
Remarks
N/A
N/A
By default, ARP filtering is
disabled.