385
# Configure the upstream port as a trusted port and the downstream ports as untrusted ports (a port
is an untrusted port by default).
[SwitchB-vlan10] interface ethernet 1/0/3
[SwitchB-Ethernet1/0/3] arp detection trust
[SwitchB-Ethernet1/0/3] quit
After the preceding configurations are complete, when ARP packets arrive at interfaces Ethernet
1/0/1 and Ethernet 1/0/2, they are checked against 802.1X security entries.
User validity check and ARP packet validity check
configuration example
Network requirements
Configure Switch B to perform ARP packet validity check and user validity check based on static IP source
guard binding entries and DHCP snooping entries for connected hosts.
Figure 119 Network diagram
Configuration procedure
1. Add all ports on Switch B to VLAN 10, and configure the IP address of VLAN-interface 10 on
Switch A. (Details not shown.)
2. Configure DHCP address pool 0 on Switch A as a DHCP server.
<SwitchA> system-view
[SwitchA] dhcp enable
[SwitchA] dhcp server ip-pool 0
[SwitchA-dhcp-pool-0] network 10.1.1.0 mask 255.255.255.0
3. Configure Host A as DHCP client, and Host B as user. (Details not shown.)
4. Configure Switch B:
# Enable DHCP snooping.
<SwitchB> system-view
[SwitchB] dhcp-snooping
[SwitchB] interface ethernet 1/0/3
To Next Page
Loading...
Need help?
General