Configuration Example (On A Dhcp Relay Agent) - HP FlexNetwork 10500 Series Security Configuration Manual

[DeviceA-GigabitEthernet1/0/1] port link-mode route
[DeviceA-GigabitEthernet1/0/1] arp authorized enable
[DeviceA-GigabitEthernet1/0/1] quit
2. Configure Device B:
<DeviceB> system-view
[DeviceB] interface gigabitethernet 1/0/1
[DeviceB-GigabitEthernet1/0/1] ip address dhcp-alloc
[DeviceB-GigabitEthernet1/0/1] quit
Verifying the configuration
# Display authorized ARP entry information on Device A.
[DeviceA] display arp all
Type: S-Static
IP Address
10.1.1.2
The output shows that IP address 10.1.1.2 has been assigned to Device B.
Device B must use the IP address and MAC address in the authorized ARP entry to communicate
with Device A. Otherwise, the communication fails. Thus user validity is ensured.

Configuration example (on a DHCP relay agent)

Network requirements
As shown in
relay agent) to ensure user validity.
Figure 127 Network diagram
DHCP server
Device A
Configuration procedure
1. Configure Device A:
# Specify the IP address for GigabitEthernet 1/0/1.
<DeviceA> system-view
[DeviceA] interface gigabitethernet 1/0/1
[DeviceA-GigabitEthernet1/0/1] ip address 10.1.1.1 24
[DeviceA-GigabitEthernet1/0/1] quit
# Configure DHCP.
[DeviceA] dhcp enable
[DeviceA] dhcp server ip-pool 1
[DeviceA-dhcp-pool-1] network 10.10.1.0 mask 255.255.255.0
D-Dynamic
MAC Address
0012-3f86-e94c
Figure 127, configure authorized ARP on GigabitEthernet 1/0/2 of Device B (a DHCP
DHCP relay agent
GE1/0/1 GE1/0/2
10.1.1.2/24 10.10.1.1/24
Device B
GE1/0/1
10.1.1.1/24
O-Openflow M-Multiport
VLAN Interface
N/A GE1/0/1
DHCP client
GE1/0/2
Device C
436
I-Invalid
Aging Type
20 D