H3C Technologies H3C S7500E Series Switches User Manual
Page 262
14-11
[SwitchB] interface gigabitethernet 2/0/1
[SwitchB-gigabitethernet2/0/1] dot1x
[SwitchB-gigabitethernet2/0/1] quit
[SwitchB] interface gigabitethernet 2/0/2
[SwitchB-gigabitethernet2/0/2] dot1x
[SwitchB-gigabitethernet2/0/2] quit
# Add local access user test.
[SwitchB] local-user test
[SwitchB-luser-test] service-type lan-access
[SwitchB-luser-test] password simple test
[SwitchB-luser-test] quit
# Enable ARP detection for VLAN 10.
[SwitchB] vlan 10
[SwitchB-vlan10] arp detection enable
# Configure the upstream port as a trusted port and the downstream ports as untrusted ports (a port is
an untrusted port by default).
[SwitchB-vlan10] interface gigabitethernet 2/0/3
[SwitchB-gigabitethernet2/0/3] arp detection trust
[SwitchB-gigabitethernet2/0/3] quit
After the preceding configurations, when ARP packets arrive at interfaces gigabitethernet2/0/1 and
gigabitethernet2/0/2, they are checked against 802.1X security entries.