Arp Gateway Protection Configuration Example - HP 5120 SI Series Security Configuration Manual

NOTE:
You can enable ARP gateway protection for up to eight gateways on a port.
•
Commands arp filter source and arp filter binding cannot be both configured on a port.
•
If ARP gateway protection works with ARP detection or ARP snooping, ARP gateway protection applies
•
first.

ARP gateway protection configuration example

Network requirements
As shown in
Switch B intends to send to Switch A is sent to Host B.
Configure Switch B to block such attacks.
Figure 109 Network diagram for ARP gateway protection configuration
Configuration procedure
# Configure ARP gateway protection on Switch B.
<SwitchB> system-view
[SwitchB] interface gigabitethernet 1/0/1
[SwitchB-GigabitEthernet1/0/1] arp filter source 10.1.1.1
[SwitchB-GigabitEthernet1/0/1] quit
[SwitchB] interface gigabitethernet 1/0/2
[SwitchB-GigabitEthernet1/0/2] arp filter source 10.1.1.1
After the configuration is complete, Switch B will discard the ARP packets whose source IP address is that
of the gateway.
Figure 1 14, Host B launches gateway spoofing attacks to Switch B. As a result, traffic that
316