Enabling Strict Arp Entry Learning - Huawei Quidway S9300 Configuration Manual

Quidway S9300 Terabit Routing Switch
Configuration Guide - Security
Data Preparation
To configure the limitation on ARP entry learning, you need the following data.
No.
1

4.3.2 Enabling Strict ARP Entry Learning

Context
Strict ARP entry learning means that the S9300 learns only the response packets of the locally
sent ARP Request packets.
Procedure
l
l
Issue 01 (2009-07-28)
Configuring strict ARP entry learning globally
1. Run:
system-view
The system view is displayed.
2. Run:
arp learning strict
Strict ARP learning is enabled.
By default, strict ARP learning is disabled on the S9300.
Configuring strict ARP entry learning on an interface
1. Run:
system-view
The system view is displayed.
2. Run:
interface interface-type interface-number
The interface view is displayed.
The interface is a VLANIF interface.
3. Run:
arp learning strict { force-enable | force-disable | trust }
The strict ARP entry learning function is enabled on the interface.
force-enable: enables strict ARP entry learning on an interface.
–
force-disable: disables strict ARP entry learning on an interface.
–
trust: indicates that the configuration of strict ARP entry learning on an interface
–
is the same as that configured globally.
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
4 ARP Security Configuration
Data
Type and number of the interface where you
need to configure the limitation on ARP entry
learning
4-5