xStack® DGS-3620 Series Layer 3 Managed Stackable Gigabit Switch CLI Reference Guide
131
Chapter 8
ARP Spoofing
Prevention Commands
config arp_spoofing_prevention [add gateway_ip <ipaddr> gateway_mac <macaddr> ports
[<portlist> | all] | delete gateway_ip <ipaddr>]
show arp_spoofing_prevention
8-1 config arp_spoofing_prevention
Description
The user can configure the spoofing prevention entry to prevent spoofing of MAC for the protected
gateway. When an entry is created, those ARP packets whose sender IP matches the gateway IP
of an entry, but either its sender MAC field or source MAC field does not match the gateway MAC
of the entry will be dropped by the system.
Format
config arp_spoofing_prevention [add gateway_ip <ipaddr> gateway_mac <macaddr> ports
[<portlist> | all] | delete gateway_ip <ipaddr>]
Parameters
add gateway_ip - Specify a gateway IP to be added.
<ipaddr> - Specify the IP address.
gateway_mac - Specify a gateway MAC to be configured.
<macaddr> - Specify the MAC address.
ports – Specify the ports.
<portlist> - Specify a range of ports to be configured.
all - Specify all ports to be configured.
delete gateway_ip - Specify a gateway IP to be deleted.
<ipaddr> - Specify the IP address.
Restrictions
Only Administrator, Operator and Power-User level users can issue this command.
Example
To configure the prevent IP spoofing attack:
DGS-3620-28SC:admin#config arp_spoofing_prevention add gateway_ip
10.254.254.251 gateway_mac 00-00-00-11-11-11 ports 1-2
Command: config arp_spoofing_prevention add gateway_ip 10.254.254.251
gateway_mac 00-00-00-11-11-11 ports 1-2
Success.
DGS-3620-28SC:admin#
To Next Page
Loading...
Need help?
General