Configuring Dhcp To Trigger Arp Learning - Huawei Quidway S9300 Configuration Manual

Quidway S9300 Terabit Routing Switch
Configuration Guide - Security
l
----End

4.4.6 Configuring DHCP to Trigger ARP Learning

Context
This task is performed to enable DHCP-triggered ARP learning. When the DHCP server assigns
an IP address to the user, the S9300 obtains the MAC address of the user and generates the ARP
entry corresponding to the IP address after responding to DHCP ACK messages. In this manner,
the S9300 does not need to learn ARP entries of the user hosts.
Procedure
Step 1 Run:
system-view
The system view is displayed.
Step 2 Run:
interface vlanif interface-number
The VLANIF interface view is displayed.
Step 3 Run:
arp learning dhcp-trigger
The S9300 is configured to learn ARP entries according to the DHCP ACK message received
on the VLANIF interface, and to discard ARP request packets for querying the destination host
of the network segment of the interface.
Issue 01 (2009-07-28)
The system view is displayed.
2. Run:
arp anti-attack gratuitous-arp drop
The S9300 is enabled to discard gratuitous ARP packets.
By default, the S9300 does not discard gratuitous ARP packets.
Enabling the function of discarding gratuitous ARP packets on an VLANIF interface
1. Run:
system-view
The system view is displayed.
2. Run:
interface vlanif interface-number
The VLANIF interface view is displayed.
Generally, this function is enabled on the user-side interface.
3. Run:
arp anti-attack gratuitous-arp drop
The interface is enabled to discard gratuitous ARP packets.
By default, the interfaces of the S9300 do not discard gratuitous ARP packets.
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
4 ARP Security Configuration
4-11