D-Link xStack DGS-3420 Series User Manual

xStack® DGS-3420 Series Layer 2 Managed Stackable Gigabit Switch CLI Reference Guide
159
Chapter 8 ARP Spoofing
Prevention Commands
config arp_spoofing_prevention [add gateway_ip <ipaddr> gateway_mac <macaddr> ports
[<portlist> | all] | delete gateway_ip <ipaddr>]
show arp_spoofing_prevention
8-1 config arp_spoofing_prevention
Description
The user can configure the spoofing prevention entry to prevent spoofing of MAC for the protected
gateway. When an entry is created, those ARP packets whose sender IP matches the gateway IP of
an entry, but either its sender MAC field or source MAC field does not match the gateway MAC of the
entry will be dropped by the system.
Format
config arp_spoofing_prevention [add gateway_ip <ipaddr> gateway_mac <macaddr> ports
[<portlist> | all] | delete gateway_ip <ipaddr>]
Parameters
add gateway_ip - Specify a gateway IP to be added.
<ipaddr> - Specify the IP address.
gateway_mac - Specify a gateway MAC to be configured.
<macaddr> - Specify the MAC address.
ports – Specify the ports.
<portlist> - Specify a range of ports to be configured.
all - Specify all ports to be configured.
delete gateway_ip - Specify a gateway IP to be deleted.
<ipaddr> - Specify the IP address.
Restrictions
Only Administrator, Operator and Power-User level users can issue this command.
Example
To configure the prevent IP spoofing attack:
DGS-3420-28SC:admin#config arp_spoofing_prevention add gateway_ip
10.254.254.251 gateway_mac 00-00-00-11-11-11 ports 1-2
Command: config arp_spoofing_prevention add gateway_ip 10.254.254.251
gateway_mac 00-00-00-11-11-11 ports 1-2

D-Link xStack DGS-3420 Series Specifications

General

Brand	D-Link
Model	xStack DGS-3420 Series
Category	Switch
Language	English