366
Ste
Command
Remarks
2. Enter VLAN view.
vlan vlan-id N/A
3. Enable ARP detection.
arp detection enable By default, ARP detection is disabled.
4. Return to system view.
quit N/A
5. Enable ARP packet validity check
and specify the objects to be
checked.
arp detection validate
{ dst-mac | ip | src-mac }
*
By default, ARP packet validity check
is disabled.
6. Enter Layer 2 Ethernet interface view
or Layer 2 aggregate interface view.
interface interface-type
interface-number
N/A
7. (Optional.) Configure the interface
as a trusted interface excluded from
ARP detection.
arp detection trust By default, an interface is untrusted.
Configuring ARP restricted forwarding
NOTE:
RP restricted forwardin
does not apply to ARP packets with multiport MAC as their destination MAC
addresses.
ARP restricted forwarding controls the forwarding of ARP packets that are received on untrusted
interfaces and have passed user validity check as follows:
• If the packets are ARP requests, they are forwarded through the trusted interface.
• If the packets are ARP replies, they are forwarded according to their destination MAC address. If no
match is found in the MAC address table, they are forwarded through the trusted interface.
Configure user validity check before you configure ARP restricted forwarding.
To enable ARP restricted forwarding:
Ste
Command
Remarks
1. Enter system view.
system-view N/A
2. Enter VLAN view.
vlan vlan-id N/A
3. Enable ARP restricted forwarding.
arp restricted-forwarding enable
By default, ARP restricted
forwarding is disabled.
Displaying and maintaining ARP detection
Execute display commands in any view and reset commands in user view.
Task Command
Display the VLANs enabled with
ARP detection.
display arp detection
Display the ARP detection statistics.
display arp detection statistics [ interface interface-type
interface-number ]
To Next Page
Loading...
Need help?
General
