329
Default level
2: System level
Parameters
ip-address: Specifies the IP address of a protected gateway.
Description
Use the arp filter source command to enable ARP gateway protection for a specified gateway.
Use the undo arp filter source command to disable ARP gateway protection for a specified gateway.
By default, ARP gateway protection is disabled.
You can enable ARP gateway protection for up to eight gateways on a port.
You cannot configure both arp filter source and arp filter binding commands on a port.
Examples
# Enable ARP gateway protection for the gateway with IP address 1.1.1.1.
<Sysname> system-view
[Sysname] interface GigabitEthernet 1/0/1
[Sysname-GigabitEthernet1/0/1] arp filter source 1.1.1.1
ARP filtering configuration commands
arp filter binding
Syntax
arp filter binding ip-address mac-address
undo arp filter binding ip-address
View
Layer 2 Ethernet port view, Layer 2 aggregate interface view
Default level
2: System level
Parameters
ip-address: Specifies the permitted sender IP address.
mac-address: Specifies the permitted sender MAC address.
Description
Use the arp filter binding command to configure an ARP filtering entry. If the sender IP and MAC
addresses of an ARP packet match an ARP filtering entry, the ARP packet is permitted. If not, it is
discarded.
Use the undo arp filter binding command to remove an ARP filtering entry.
By default, no ARP filtering entry is configured.
You can configure up to eight ARP filtering entries on a port.
You cannot configure both arp filter source and arp filter binding commands on a port.