Arp Filtering Configuration Example - HP 6600 Security Configuration Manual

The arp filter source and arp filter binding command cannot be both configured on an interface.
•
• If ARP filtering works with ARP detection and ARP snooping, ARP filtering applies first.
To configure ARP filtering:
Step
1. Enter system view.
2. Enter Layer 2 Ethernet interface
view.
3. Enable ARP filtering and
configure a permitted entry.

ARP filtering configuration example

Network requirements
As shown in
respectively. The IP and MAC addresses of Host B are 10.1.1.3 and 000f-e349- 1 234, respectively.
Configure ARP filtering on GigabitEthernet 3/0/1 and GigabitEthernet 3/0/2 of Router B to permit ARP
packets from only the two hosts.
Figure 255 Network diagram
Configuration procedure
# Configure ARP filtering on Router B.
<RouterB> system-view
[RouterB] interface gigabitethernet 3/0/1
[RouterB-GigabitEthernet3/0/1] arp filter binding 10.1.1.2 000f-e349-1233
[RouterB-GigabitEthernet3/0/1] quit
[RouterB] interface gigabitethernet 3/0/2
[RouterB-GigabitEthernet3/0/2] arp filter binding 10.1.1.3 000f-e349-1234
After the configuration is complete, GigabitEthernet 3/0/1 permits ARP packets from Host A, and
discard other ARP packets. GigabitEthernet 3/0/2 permits ARP packets from Host B and discard other
ARP packets.
Figure 255, the IP and MAC addresses of Host A are 10.1.1.2 and 000f-e349- 1 233,
Command
system-view
interface interface-type interface-number
arp filter binding ip-address
mac-address
526
Remarks
N/A
N/A
This feature is disabled by
default.