Arp Detection Configuration Example I - HP 3600 v2 Series Security Configuration Manual

To do...
Display the ARP detection
statistics
Clear the ARP detection
statistics

ARP detection configuration example I

Network requirements
As shown in
ARP detection for VLAN 10 to allow only packets from valid clients to pass. Configure Host A and Host
B as local 802.1X access users.
Figure 128 Network diagram
Switch A
Switch B
Eth1/0/1
Host A
Configuration procedure
Add all the ports on Switch B into VLAN 10, and configure the IP address of VLAN-interface 10 on
1.
Switch A. (Details not shown)
Configure Switch A as a DHCP server
2.
# Configure DHCP address pool 0
<SwitchA> system-view
[SwitchA] dhcp enable
[SwitchA] dhcp server ip-pool 0
[SwitchA-dhcp-pool-0] network 10.1.1.0 mask 255.255.255.0
Configure Host A and Host B as 802.1X clients (the configuration procedure is not shown) and
3.
configure them to upload IP addresses for ARP detection.
Configure Switch B
4.
# Enable the 802.1X function.
<SwitchB> system-view
[SwitchB] dot1x
[SwitchB] interface ethernet 1/0/1
Use the command...
display arp detection statistics [ interface
interface-type interface-number ] [ | { begin |
exclude | include } regular-expression ]
reset arp detection statistics [ interface
interface-type interface-number ]
Figure 128, configure Switch A as a DHCP server and Switch B to support 802.1X. Enable
Gateway
DHCP server
Eth1/0/3
Vlan-int10
10.1.1.1/24
VLAN 10
Eth1/0/3
Eth1/0/2
Host B
341
Remarks
Available in any view
Available in user view