Configuration Procedure; Configuration Example - HP FlexNetwork 10500 Series Security Configuration Manual

•
If ARP filtering works with ARP detection, MFF, ARP snooping, and ARP fast-reply, ARP filtering
applies first.

Configuration procedure

To configure ARP filtering:
Step
1. Enter system view.
2. Enter Layer 2 Ethernet
interface or Layer 2
aggregate interface view.
3. Enable ARP filtering and
configure a permitted entry.

Configuration example

Network requirements
As shown in
respectively. The IP and MAC addresses of Host B are 10.1.1.3 and 000f-e349-1234, respectively.
Configure ARP filtering on GigabitEthernet 1/0/1 and GigabitEthernet 1/0/2 of Switch B to permit
ARP packets from only Host A and Host B.
Figure 131 Network diagram
Configuration procedure
# Configure ARP filtering on Switch B.
<SwitchB> system-view
[SwitchB] interface gigabitethernet 1/0/1
[SwitchB-GigabitEthernet1/0/1] arp filter binding 10.1.1.2 000f-e349-1233
[SwitchB-GigabitEthernet1/0/1] quit
[SwitchB] interface gigabitethernet 1/0/2
[SwitchB-GigabitEthernet1/0/2] arp filter binding 10.1.1.3 000f-e349-1234
Command
system-view
interface interface-type
interface-number
arp filter binding ip-address
mac-address
Figure 131, the IP and MAC addresses of Host A are 10.1.1.2 and 000f-e349-1233,
446
Remarks
N/A
N/A
By default, ARP filtering is
disabled.