Arp packet source mac address consistency check, Configuring arp detection – H3C Technologies H3C WX3000E Series Wireless Switches User Manual

Page 165

Advertising
background image

149

ARP packet source MAC address consistency check

This feature enables a gateway device to filter out ARP packets with the source MAC address in the

Ethernet header different from the sender MAC address in the ARP message, so that the gateway device

can learn correct ARP entries.

Configuring ARP detection

NOTE:

If both the ARP detection based on specified objects and the ARP detection based on static IP Source
Guard binding entries/DHCP snooping entries/802.1X security entries/OUI MAC addresses are

enabled, the former one applies first, and then the latter applies.

1.

Select Network > ARP Anti-Attack from the navigation tree to enter the default ARP Detection page
shown in

Figure 128

.

Figure 128 ARP Detection configuration page

2.

Configure ARP detection as described in

Table 61

.

3.

Click Apply.

Table 61 Configuration items

Item Description

VLAN Settings

Select VLANs on which ARP detection is to be enabled.
To add VLANs to the Enabled VLANs list box, select one or multiple VLANs from the

Disabled VLANs list box and click the << button.
To remove VLANs from the Enabled VLANs list box, select one or multiple VLANs from the
list box and click the >> button.

Advertising