Arp Restricted Forwarding Configuration Example - HP 12500 Series Configuration Manual
Routing
Hide thumbs
Also See for 12500 Series:
- Configuration manual (402 pages) ,
- Network management and monitoring command reference (320 pages) ,
- Command reference manual (157 pages)
Table of Contents
# Enable DHCP snooping.
[SwitchB] dhcp-snooping
[SwitchB] interface GigabitEthernet 3/0/3
[SwitchB-GigabitEthernet3/0/3] dhcp-snooping trust
[SwitchB-GigabitEthernet3/0/3] quit
# Enable ARP detection for VLAN 10.
[SwitchB] vlan 10
[SwitchB-vlan10] arp detection enable
# Configure the upstream port as a trusted port and the downstream ports as untrusted ports (a port
is an untrusted port by default).
[SwitchB-vlan10] interface GigabitEthernet 3/0/3
[SwitchB-GigabitEthernet3/0/3] arp detection trust
[SwitchB-GigabitEthernet3/0/3] quit
# Configure a static IP source guard binding entry on interface GigabitEthernet 3/0/2.
[SwitchB] interface GigabitEthernet 3/0/2
[SwitchB-GigabitEthernet3/0/2] ip source binding ip-address 10.1.1.6 mac-address
0001-0203-0607 vlan 10
[SwitchB-Ethernet3/0/2] ip verify source ip-address mac-address
[SwitchB-GigabitEthernet3/0/2] quit
# Enable the checking of the MAC addresses and IP addresses of ARP packets.
[SwitchB] arp detection validate dst-mac ip src-mac
After the preceding configurations are complete, when ARP packets arrive at interfaces
GigabitEthernet 3/0/1 and GigabitEthernet 3/0/2, their MAC and IP addresses are checked,
and then the packets are checked against the static IP source guard binding entries and finally
DHCP snooping entries.
ARP restricted forwarding configuration example
Network requirements
As shown in
is 10.1.1.6, and its MAC address is 0001-0203-0607. Port isolation configured on Switch B isolates the
two hosts at Layer 2, which can communicate with the gateway Switch A. GigabitEthernet 3/0/1,
GigabitEthernet 3/0/2 and GigabitEthernet 3/0/3 belong to VLAN 10. Switch B is enabled with DHCP
snooping, and has ARP detection enabled in VLAN 10.
Configure Switch B to still perform port isolation on ARP broadcast requests.
Figure
97, Switch A acts as a DHCP server. Host A acts as a DHCP client. Host B's IP address
279
Table of Contents
Troubleshooting
