R21xx-HP FlexFabric 11900 Security Configuration Guide

130

Ste

Command

Remarks

3. Enable authorized ARP on the

interface.

arp authorized enable

By default, authorized ARP is

disabled.

Configuration example (on a DHCP relay agent)

Network requirements

Configure authorized ARP on Ten-GigabitEthernet 1/0/2 of Switch B (a DHCP relay agent) to ensure

user validity.

Figure 46 Network diagram

Configuration procedure

1. Configure Switch A:

# Configure the IP address for Ten-GigabitEthernet 1/0/1.

<SwitchA> system-view

[SwitchA] interface ten-gigabitethernet 1/0/1

[SwitchA-Ten-GigabitEthernet1/0/1] ip address 10.1.1.1 24

[SwitchA-Ten-GigabitEthernet1/0/1] quit

# Configure DHCP.

[SwitchA] dhcp enable

[SwitchA] dhcp server ip-pool 1

[SwitchA-dhcp-pool-1] network 10.10.1.0 mask 255.255.255.0

[SwitchA-dhcp-pool-1] gateway-list 10.10.1.1

[SwitchA-dhcp-pool-1] quit

[SwitchA] ip route-static 10.10.1.0 24 10.1.1.2

2. Configure Switch B:

# Enable DHCP.

<SwitchB> system-view

[SwitchB] dhcp enable

# Configure the IP addresses of Ten-GigabitEthernet 1/0/1 and Ten-GigabitEthernet 1/0/2.

[SwitchB] interface ten-gigabitethernet 1/0/1

[SwitchB-Ten-GigabitEthernet1/0/1] ip address 10.1.1.2 24

[SwitchB-Ten-GigabitEthernet1/0/1] quit

[SwitchB] interface ten-gigabitethernet 1/0/2