20.2 ARP Guard Configuration
20.2.1 ARP GuardConfiguration Task List
1) Configure the protected IP address
Command
Port Mode
arp-guard ip <addr>
no arp-guard ip <addr>
20.2.2 ARP Guard Command List
20.2.2.1 arp-guard ip
Command:arp-guard ip <addr>
no arp-guard ip <addr>
Function:Add a ARP GUARD address.
Parameters:<addr> is the protected IP address, in dotted decimal notation.
Command mode:Port configuration mode.
Default:There is no ARP GUARD address by default.
Usage Guide:After configuring the ARP GUARD address, the ARP messages received
from the ports configured ARP GUARD will be filtered. If the source IP addresses of the
ARP messagse match the ARP GUARD address configured on this port, these messages
will be judged as ARP cheating messages, which will be directly dropped instead of
sending to the CPU of the switch or forwarding. 16 ARP GUARD addresses can be
configured on each port.
Example:Configure the ARP GUARD address on port Ethernet0/0/1 as 100.1.1.1.
Switch(Config)#interface ethernet0/0/1
Switch(Config- Ethernet 0/0/1)# arp-guard ip 100.1.1.1
DCS-3950 series Ethernet switch manual
Notes
Configure/Remove the ARP Guard
address.
333