Configuration Prerequisites; Enabling Dhcp Snooping; Enabling Arp Detection In Svlans - HP 6600 Configuration Manual

Complete the following tasks to configure many-to-one VLAN mapping:
Task

Enabling DHCP snooping

Enabling ARP detection in SVLANs

Configuring an uplink policy
Configuring the customer-side port
Configuring the network-side port

Configuration prerequisites

Before configuring many-to-one VLAN mapping:
Make sure all enterprise department users obtain IP addresses through DHCP. For information
•
about assigning IP addresses through DHCP, see Layer 3—IP Services Configuration Guide.
• Create CVLANs and SVLANs, and plan CVLANs-to-SVLAN mappings.
Enabling DHCP snooping
Step
1. Enter system view.
2. Enable DHCP snooping.
Enabling ARP detection in SVLANs
The ARP detection function enables a switch to modify the VLAN attributes of ARP packets, which is
impossible under the normal ARP packet processing procedure. For more information about ARP
detection, see Security Configuration Guide.
To enable ARP detection in all SVLANs:
Step
1. Enter system view.
2. Enter VLAN view.
3. Enable ARP detection.
To defend against ARP attacks, enable ARP detection also in all CVLANs.
Remarks
Enables DHCP snooping globally (required).
Enables ARP detection in all SVLANs (required).
Configures an uplink policy for the customer-side port (required).
Configures VLAN and other settings required for many-to-one
VLAN mapping (required).
Configures VLAN and other settings required for many-to-one
VLAN mapping (required).
Command Remarks
system-view N/A
dhcp-snooping By default, DHCP snooping is disabled.
Command
system-view
vlan vlan-id
arp detection enable
187
Remarks
N/A
N/A
By default, ARP detection is
disabled.