H3C Technologies H3C S7500E Series Switches - Manual (Page 260)

14-9
Figure 14-1 Network diagram for ARP detection configuration
Configuration procedure
1) Add all the ports on Switch B to VLAN 10, and configure the IP address of VLAN-interface 10 on
Switch A (the configuration procedure is omitted).
2) Configure Switch A as a DHCP server
# Configure DHCP address pool 0.
system-view
[SwitchA] dhcp enable
[SwitchA] dhcp server ip-pool 0
[SwitchA-dhcp-pool-0] network 10.1.1.0 mask 255.255.255.0
3) Configure Host A as DHCP client, and Host B as user respectively (the configuration procedure is
omitted)
4) Configure Switch B
# Enable DHCP snooping.
system-view
[SwitchB] dhcp-snooping
[SwitchB] interface gigabitethernet 2/0/3
[SwitchB-gigabitethernet2/0/3] dhcp-snooping trust
[SwitchB-gigabitethernet2/0/3] quit
# Enable ARP detection for VLAN 10.
[SwitchB] vlan 10
[SwitchB-vlan10] arp detection enable
# Configure the upstream port as a trusted port and the downstream ports as untrusted ports (a port is
an untrusted port by default).
[SwitchB-vlan10] interface gigabitethernet 2/0/3
[SwitchB-gigabitethernet2/0/3] arp detection trust
[SwitchB-gigabitethernet2/0/3] quit
# Configure a static IP Source Guard binding entry on interface gigabitethernet 2/0/2.
[SwitchB] interface gigabitethernet 2/0/2