D-Link xStack DGS-3620 Series User Manual

xStack® DGS-3620 Series Layer 3 Managed Stackable Gigabit Switch CLI Reference Guide
154
Chapter 8 ARP Spoofing
Prevention Commands
config arp_spoofing_prevention [add gateway_ip <ipaddr> gateway_mac <macaddr> ports
[<portlist> | all] | delete gateway_ip <ipaddr>]
show arp_spoofing_prevention
8-1 config arp_spoofing_prevention
Description
The user can configure the spoofing prevention entry to prevent spoofing of MAC for the protected
gateway. When an entry is created, those ARP packets whose sender IP matches the gateway IP
of an entry, but either its sender MAC field or source MAC field does not match the gateway MAC
of the entry will be dropped by the system.
Format
config arp_spoofing_prevention [add gateway_ip <ipaddr> gateway_mac <macaddr> ports
[<portlist> | all] | delete gateway_ip <ipaddr>]
Parameters
add gateway_ip - Specifies a gateway IP to be added.
<ipaddr> - Enter the IP address.
gateway_mac - Specifies a gateway MAC to be configured.
<macaddr> - Enter the MAC address.
ports – Specifies the ports.
<portlist> - Enter a range of ports to be configured.
all - Specifies all ports to be configured.
delete gateway_ip - Specifies a gateway IP to be deleted.
<ipaddr> - Enter the IP address.
Restrictions
Only Administrators, Operators and Power-Users can issue this command.
Example
To configure the prevent IP spoofing attack:
DGS-3620-28PC:admin# config arp_spoofing_prevention add gateway_ip
10.254.254.251 gateway_mac 00-00-00-11-11-11 ports 1:1-1:2
Command: config arp_spoofing_prevention add gateway_ip 10.254.254.251
gateway_mac 00-00-00-11-11-11 ports 1:1-1:2
Success.
DGS-3620-28PC:admin#

D-Link xStack DGS-3620 Series Specifications

General

Brand	D-Link
Model	xStack DGS-3620 Series
Category	Switch
Language	English