xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch CLI Reference Guide
507
ARP Spoofing Prevention Commands
The ARP Spoofing Prevention commands in the Command Line Interface (CLI) are listed (along with the appropriate
parameters) in the following table.
Command Parameters
config arp_spoofing_prevention [add gateway_ip <ipaddr> gateway_mac <macaddr> ports [<portlist> | all] |
delete gateway_ip <ipaddr>]
show arp_spoofing_prevention
Each command is listed, in detail, in the following sections.
config arp_spoofing_prevention
Purpose
The user can configure the spoofing prevention entry to prevent spoofing of MAC for the
protected gateway.
Syntax config arp_spoofing_prevention [add gateway_ip <ipaddr> gateway_mac <macaddr>
ports [<portlist> | all] | delete gateway_ip <ipaddr>]
Description
When an entry is created, those ARP packets whose sender IP matches the gateway IP of an
entry, but either its sender MAC field or source MAC field doesnot match the gateway MAC of
the entry will be dropped by the system.
Parameters add - Specifies to add an ARP spoofing prevention entry.
gateway_ip - Specifies a gateway IP address to be configured.
<ipaddr> - Enter the IP address used for this configuration here.
gateway_mac - Specifies a gateway MAC address to be configured.
<macaddr> - Enter the MAC address used for this configuration here.
ports - Specifies a range of ports to be configured.
<portlist> - Enter a list of ports used for the configuration here.
all - Specifies all of ports to be configured.
delete - Specifies to delete an ARP spoofing prevention entry.
gateway_ip - Specifies a gateway ip to be configured.
<ipaddr> - Enter the IP address used for this configuration here.
Restrictions
Only Administrator and Operator-level users can issue this command.
Example usage:
To configure the ARP spoofing prevention entry:
To Next Page
Loading...
Need help?
General