H3C Technologies H3C S5120 Series Switches - Manual (Page 221)

i
Table of Contents
1 ARP Configuration·····································································································································1-1
ARP Overview·········································································································································1-1
ARP Function ··································································································································1-1
ARP Message Format ·····················································································································1-1
ARP Operation ································································································································1-2
ARP Table ·······································································································································1-3
Configuring ARP ·····································································································································1-3
Configuring a Static ARP Entry ·······································································································1-3
Configuring the Maximum Number of ARP Entries for an Interface ···············································1-4
Setting the Aging Time for Dynamic ARP Entries ···········································································1-4
Enabling the ARP Entry Check ·······································································································1-5
ARP Configuration Example············································································································1-5
Configuring Gratuitous ARP····················································································································1-6
Introduction to Gratuitous ARP········································································································1-6
Configuring Gratuitous ARP ············································································································1-6
Displaying and Maintaining ARP·············································································································1-7
2 ARP Attack Defense Configuration ·········································································································2-1
Configuring ARP Active Acknowledgement ····························································································2-1
Introduction······································································································································2-1
Configuring the ARP Active Acknowledgement Function ·······························································2-1
Configuring Source MAC Address Based ARP Attack Detection···························································2-1
Introduction······································································································································2-1
Configuration Procedure··················································································································2-2
Displaying and Maintaining Source MAC Address Based ARP Attack Detection···························2-3
Configuring ARP Packet Rate Limit ········································································································2-3
Introduction······································································································································2-3
Configuring the ARP Packet Rate Limit Function ···········································································2-3
Configuring ARP Detection ·····················································································································2-3
Introduction to ARP Detection ·········································································································2-3
Enabling ARP Detection Based on DHCP Snooping Entries/802.1X Security Entries/Static
IP-to-MAC Bindings ·························································································································2-4
Configuring ARP Detection Based on Specified Objects ································································2-6
Displaying and Maintaining ARP Detection·····················································································2-7
ARP Detection Configuration Example I ·························································································2-7
ARP Detection Configuration Example II ························································································2-9
Configuring Periodic Sending of Gratuitous ARP Packets ···································································2-10
Introduction····································································································································2-10
Configuration Procedure················································································································2-10