Configuration Guidelines; Configuration Procedure; Configuration Example - H3C S5500-EI Series Security Configuration Manual

Configuration guidelines

Follow these guidelines when you configure ARP filtering:
You can configure up to eight ARP filtering entries on a port.
•
Commands arp filter source and arp filter binding cannot be both configured on a port.
•
If ARP filtering works with ARP detection, and ARP snooping, ARP filtering applies first.
•

Configuration procedure

To configure ARP filtering:
Step
1. Enter system view.
2. Enter Layer 2 Ethernet interface
view/Layer 2 aggregate interface
view.
3. Configure an ARP filtering entry.

Configuration example

Network requirements
As shown in
and MAC addresses of Host B are 10.1.1.3 and 000f-e349- 1 234.
Configure ARP filtering on GigabitEthernet 1/0/1 and GigabitEthernet 1/0/2 of Switch B to permit
specific ARP packets only.
Figure 137 Network diagram
Configuration procedure
# Configure ARP filtering on Switch B.
<SwitchB> system-view
Figure 137, the IP and MAC addresses of Host A are 10.1.1.2 and 000f-e349- 1 233. The IP
Command
system-view
interface interface-type
interface-number
arp filter binding ip-address
mac-address
399
Remarks
N/A
N/A
Not configured by default