Configuring The Arp Packet Rate Limit Function - 3Com 4500 PWR 26-Port Configuration Manual

Hide thumbs Also See for 4500 PWR 26-Port:

Manual (942 pages)

Configuration manual (870 pages)

Getting started manual (128 pages)

Table of Contents

Specify the current port as a

trusted port

Configure the port as an ARP

trusted port

Quit to system view

Enter VLAN view

Enable the ARP attack

detection function

Enable ARP restricted

When most clients acquire IP addresses through DHCP and some clients use static IP addresses,

you need to enable DHCP snooping and configure static IP binding entries on the switch. These

functions can cooperate with ARP attack detection to check the validity of packets.

You need to use ARP attack detection based on authenticated 802.1x clients together with

functions of both MAC-based 802.1x authentication and ARP attack detection.

Currently, the VLAN ID of an IP-to-MAC binding configured on a port of an S4500 series Ethernet

switch is the same as the default VLAN ID of the port. If the VLAN tag of an ARP packet is different

from the default VLAN ID of the receiving port, the ARP packet cannot pass the ARP attack

detection based on the IP-to-MAC bindings.

Before enabling ARP restricted forwarding, make sure you have enabled ARP attack detection and

configured ARP trusted ports.

You are not recommended to configure ARP attack detection on the ports of a fabric or an

aggregation group.