R21xx-HP FlexFabric 11900 Security Command Reference
176
[Sysname-Ten-GigabitEthernet1/0/1] arp filter source 1.1.1.1
ARP filtering commands
arp filter binding
Use arp filter binding to configure an ARP permitted entry. If the sender IP and MAC addresses of an ARP
packet match an ARP permitted entry, the ARP packet is permitted. If not, it is discarded.
Use undo arp filter binding to remove an ARP permitted entry.
Syntax
arp filter binding ip-address mac-address
undo arp filter binding ip-address
Default
No ARP permitted entry is configured.
Views
Layer 2 Ethernet interface view, Layer 2 aggregate interface view
Predefined user roles
network-admin
Parameters
ip-address: Permitted sender IP address.
mac-address: Permitted sender MAC address.
Usage guidelines
You can configure up to eight ARP permitted entries on an interface.
You cannot configure both the arp filter source and arp filter binding commands on the same interface.
Examples
# Configure an ARP permitted entry.
<Sysname> system-view
[Sysname] interface ten-gigabitethernet 1/0/1
[Sysname-Ten-GigabitEthernet1/0/1] arp filter binding 1.1.1.1 2-2-2










