Configuration Example - HPE FlexNetwork 10500 Series Security Configuration Manual

Hide thumbs Also See for FlexNetwork 10500 Series:
Table of Contents

Advertisement

Step
1.
Enter system view.
2.
Enter Layer 2 Ethernet
interface or Layer 2 aggregate
interface view.
3.
Enable ARP filtering and
configure a permitted entry.

Configuration example

Network requirements
As shown in
respectively. The IP and MAC addresses of Host B are 10.1.1.3 and 000f-e349-1234, respectively.
Configure ARP filtering on GigabitEthernet 1/0/1 and GigabitEthernet 1/0/2 of Device B to permit
ARP packets from only Host A and Host B.
Figure 142 Network diagram
Device A
Device B
GE1/0/1
Host A
Configuration procedure
# Configure ARP filtering on Device B.
<DeviceB> system-view
[DeviceB] interface gigabitethernet 1/0/1
[DeviceB-GigabitEthernet1/0/1] arp filter binding 10.1.1.2 000f-e349-1233
[DeviceB-GigabitEthernet1/0/1] quit
[DeviceB] interface gigabitethernet 1/0/2
[DeviceB-GigabitEthernet1/0/2] arp filter binding 10.1.1.3 000f-e349-1234
Verifying the configuration
# Verify that GigabitEthernet 1/0/1 permits ARP packets from Host A and discards other ARP
packets.
# Verify that GigabitEthernet 1/0/2 permits ARP packets from Host B and discards other ARP
packets.
Command
system-view
interface interface-type
interface-number
arp filter binding ip-address
mac-address
Figure
142, the IP and MAC addresses of Host A are 10.1.1.2 and 000f-e349-1233,
GE1/0/3
GE1/0/2
Host B
529
Remarks
N/A
N/A
By default, ARP filtering is
disabled.

Advertisement

Table of Contents
loading

Table of Contents