H3C Technologies H3C S6300 Series Switches - Manual (Page 351)

336
• You can configure a maximum of eight permitted entries on an interface.
• Do not configure both the arp filter source and arp filter binding commands on an interface.
• If ARP filtering works with ARP detection, MFF, and ARP snooping, ARP filtering applies first.
Configuration procedure
To configure ARP filtering:
Step Command Remarks
1. Enter system view. system-view N/A
2. Enter Layer 2 Ethernet interface
or Layer 2 aggregate interface
view. interface interface-type interface-number N/A.
3. Enable ARP filtering and
configure a permitted entry. arp filter binding ip-address
mac-address By default, ARP filtering is
disabled.
Configuration example
Network requirements
As shown in Figure 111 , the IP and MAC addresses of Host A are 10.1.1.2 and 000f-e349-1233,
respectively. The IP and MAC addresses of Host B are 10.1.1.3 and 000f-e349-1234, respectively.
Configure ARP filtering on Ten-GigabitEthernet 1/0/1 and Ten-GigabitEthernet 1/0/2 of Switch B to
permit ARP packets from only the two hosts.
Figure 111 Network diagram
Configuration procedure
# Configure ARP filtering on Switch B.
system-view
[SwitchB] interface ten-gigabitethernet 1/0/1
[SwitchB-Ten-GigabitEthernet1/0/1] arp filter binding 10.1.1.2 000f-e349-1233