Configuring Arp; Configuring Arp Basic Functions; Configuring Arp Attack Detection - H3C S3100-52P Operation Manual

Operation Manual – ARP
H3C S3100-52P Ethernet Switch

1.2 Configuring ARP

1.2.1 Configuring ARP Basic Functions

Follow these steps to configure ARP basic functions:
Enter system view
Add a static ARP entry
Configure the ARP aging
timer
Enable the ARP entry
checking function (that is,
disable the switch from
learning ARP entries with
multicast MAC
addresses)
Caution:
Static ARP entries are valid as long as the Ethernet switch operates normally. But
some operations, such as removing a VLAN, or removing a port from a VLAN, will
make the corresponding ARP entries invalid and therefore removed automatically.
As for the arp static command, the value of the vlan-id argument must be the ID of
an existing VLAN, and the port identified by the interface-type and interface-number
arguments must belong to the VLAN.
Currently, static ARP entries cannot be configured on the ports of an aggregation
group.

1.2.2 Configuring ARP Attack Detection

Follow these steps to configure the ARP attack detection function:
Enter system view
Enable DHCP snooping
To do...
system-view
arp static ip-address
mac-address [ vlan-id
interface-type
interface-number ]
arp timer aging
aging-time
arp check enable
To do...
system-view
dhcp-snooping
Use the command...
Use the command...
1-7
Chapter 1 ARP Configuration
Remarks
—
Optional
By default, the ARP
mapping table is empty,
and entries are created
dynamically by ARP.
Optional
20 minutes by default.
Optional
Enabled by default.
Remarks
—
Required
Disabled by default.