Configuration Guide Configuring ARP Check
5.4 Configuration
(Mandatory) It is used to enable APR Check.
5.4.1 Configuring ARP Check
Configuration Effect
Illegal ARP packets are filtered out.
Notes
When ARP Check is enabled, the number of policies or users of related security applications may decrease.
ARP Check cannot be configured on mirrored destination ports.
ARP Check cannot be configured on the trusted ports of DHCP Snooping.
ARP Check cannot be configured on global IP+MAC exclude ports.
ARP Check can be enabled only on wired switching ports, layer-2 APs, layer-2 encapsulation sub-interfaces, as well as
WLAN interfaces. Enable ARP check for the wired in interface configuration mode, while for the wireless in WLAN
security configuration mode.
For fit APs in wired access mode, ARP Check needs to be enabled in ap-config all mode.
Configuration Steps
Enabling ARP Check
(Mandatory) By default, this function is disabled. The command should be input if the administer wants to enable ARP
check.
Verification
Use the show run command to display the function configuration.
Run show interface { interface-type interface-number } arp-check list to display filtered entries.
Related Commands
Enabling ARP Check
Interface configuration mode/WLAN security configuration mode