HP 6125XLG R2306-HP 6125XLG Blade Switch Security Configuration Guide - Page 188
Configuring ARP restricted forwarding, Displaying and maintaining ARP detection
View all HP 6125XLG manuals
Add to My Manuals
Save this manual to your list of manuals |
Page 188 highlights
Step Command 3. Enable ARP detection. arp detection enable 4. Return to system view. quit 5. Enable ARP packet validity check and specify the objects to be checked. arp detection validate { dst-mac | ip | src-mac } * 6. Enter Ethernet interface view or aggregate interface view. interface interface-type interface-number 7. (Optional.) Configure the interface as a trusted interface excluded from arp detection trust ARP detection. Remarks By default, ARP detection is disabled. N/A By default, ARP packet validity check is disabled. N/A By default, an interface is untrusted. Configuring ARP restricted forwarding NOTE: ARP restricted forwarding does not apply to ARP packets with multiport MAC as their destination MAC addresses. ARP restricted forwarding controls the forwarding of ARP packets that are received on untrusted interfaces and have passed user validity check as follows: • If the packets are ARP requests, they are forwarded through the trusted interface. • If the packets are ARP replies, they are forwarded according to their destination MAC address. If no match is found in the MAC address table, they are forwarded through the trusted interface. Configured user validity check before you configure ARP restricted forwarding. To enable ARP restricted forwarding: Step 1. Enter system view. 2. Enter VLAN view. 3. Enable ARP restricted forwarding. Command system-view vlan vlan-id arp restricted-forwarding enable Remarks N/A N/A By default, ARP restricted forwarding is disabled. Displaying and maintaining ARP detection Execute display commands in any view and reset commands in user view. Task Command Display the VLANs enabled with ARP detection. display arp detection Display the ARP detection statistics. display arp detection statistics [ interface interface-type interface-number ] Clear the ARP detection statistics. reset arp detection statistics [ interface interface-type interface-number ] 179