HP 3600 v2 Series Configuration Guide

390
Figure 121 Network diagram
Configuration procedure
# Configure ARP gateway protection on Switch B.
<SwitchB> system-view
[SwitchB] interface ethernet 1/0/1
[SwitchB-Ethernet1/0/1] arp filter source 10.1.1.1
[SwitchB-Ethernet1/0/1] quit
[SwitchB] interface ethernet 1/0/2
[SwitchB-Ethernet1/0/2] arp filter source 10.1.1.1
After the configuration is complete, Switch B will discard the ARP packets whose source IP address is that
of the gateway.
Configuring ARP filtering
To prevent gateway spoofing and user spoofing, the ARP filtering feature controls the forwarding of ARP
packets on a port.
The port checks the sender IP and MAC addresses in a received ARP packet against configured ARP
filtering entries. If a match is found, the packet is handled normally. If not, the packet is discarded.
Configuration guidelines
Follow these guidelines when you configure ARP filtering:
• You can configure up to eight ARP filtering entries on a port.
• Commands arp filter source and arp filter binding cannot be both configured on a port.
• If ARP filtering works with ARP detection, MFF, and ARP snooping, ARP filtering applies first.
Configuration procedure
To configure ARP filtering:

HP 3600 v2 Series Specifications

General

Brand	HP
Model	3600 v2 Series
Category	Switch
Language	English