281
The port checks the sender IP and MAC addresses in a received ARP packet against configured ARP
filtering entries. If a match is found, the packet is handled normally. If not, the packet is discarded.
Configuration procedure
Follow these steps to configure ARP filtering:
Enter Layer 2 Ethernet port
view/Layer 2 aggregate interface
view
interface interface-type interface-
number
Configure an ARP filtering entry
arp filter binding ip-address mac-
address
Required
Not configured by default.
NOTE:
ï‚· You can configure up to eight ARP filtering entries on a port.
ï‚· Commands arp filter source and arp filter binding cannot be both configured on a port.
ï‚· If ARP filtering works with ARP detection, ARP filtering applies first.
ARP filtering configuration example
Network requirements
As shown in Figure 88, the IP and MAC addresses of Host A are 10.1.1.2 and 000f-e349-1233
respectively. The IP and MAC addresses of Host B are 10.1.1.3 and 000f-e349-1234, respectively.
Configure ARP filtering on GigabitEthernet 1/0/1 and GigabitEthernet 1/0/2 of Switch B to permit
specific ARP packets only.
Figure 88 Network diagram for ARP filtering configuration
Switch A
Switch B
Host A Host B
GE1/0/1
GE1/0/3
GE1/0/2
Configuration procedure
# Configure ARP filtering on Switch B.