PLANET WGSW-52040 - Manual (Page 431)

26-42
Chapter 26 Command for ARP
GUARD
26.1 arp-guard ip
Command:
arp-guard ip
no arp-guard ip
Function:
Add an ARP GUARD address, the no command deletes ARP GUARD address.
Parameters:
is the protected IP address, in dotted decimal notation.
Default:
There is no ARP GUARD address by default.
Command Mode:
Port configuration mode
Usage Guide:
After configuring the ARP GUARD address, the ARP messages received from the ports configured ARP GUARD will
be filtered. If the source IP addresses of the ARP messagse match the ARP GUARD address configured on this port,
these messages will be judged as ARP cheating messages, which will be directly dropped instead of sending to the
CPU of the switch or forwarding. 16 ARP GUARD addresses can be configured on each port.
Example:
Configure the ARP GUARD address on port ethernet1/1 as 100.1.1.1.
switch(config)#interface ethernet1/1
switch(Config-If-Ethernet 1/1)#arp-guard ip 100.1.1.1
Delete the ARP GUARD address on port ethernet1/1 as 100.1.1.1.
switch(config)#interface ethernet1/1
switch(Config-If-Ethernet 1/1)#no arp-guard ip 100.1.1.1