342
DCS-3950 series Ethernet switch manual
192.168.1.100), and all the other ports of SWITCH A are connected to common PC. The
following configuration can prevent ARP scanning effectively without affecting the normal
operation of the system.
SWITCH A configuration task sequence:
SwitchA(config)#anti-arpscan enable
SwitchA(config)#anti-arpscan recovery time 3600
SwitchA(config)#anti-arpscan trust ip 192.168.1.100 255.255.255.0
SwitchA(config)#interface ethernet 0/0/2
SwitchA (Config-If-Ethernet0/0/2)#anti-arpscan trust port
SwitchA (Config-If-Ethernet0/0/2)#exit
SwitchA(config)#interface ethernet 0/0/19
SwitchA (Config-If-Ethernet0/0/19)#anti-arpscan trust supertrust-port
Switch A(Config-If-Ethernet0/0/19)#exit
SWITCHB configuration task sequence:
Switch B(Config)#anti-arpscan enable
SwitchB(config)#interface ethernet 0/0/1
SwitchB (Config-If-Ethernet0/0/1)#anti-arpscan trust port
SwitchB (Config-If-Ethernet0/0/1)exit