R3102-R3103-HP 6600/HSR6600 Routers Security Command Reference

513
Parameters
ip-address: IP address of a protected gateway.
Usage guidelines
You can enable ARP gateway protection for up to eight gateways on a port.
You cannot configure both arp filter source and arp filter binding commands on a port.
Examples
# Enable ARP gateway protection for the gateway with IP address 1.1.1.1.
<Sysname> system-view
[Sysname] interface gigabitethernet 3/0/1
[Sysname-GigabitEthernet3/0/1] arp filter source 1.1.1.1
ARP filtering configuration commands
NOTE:
The commands of this feature are supported only when SAP modules operate in bridge mode.
arp filter binding
Use arp filter binding to configure an ARP filtering entry. If the sender IP and MAC addresses of an ARP
packet match an ARP filtering entry, the ARP packet is permitted. If not, it is discarded.
Use undo arp filter binding to remove an ARP filtering entry.
Syntax
arp filter binding ip-address mac-address
undo arp filter binding ip-address
Default
No ARP filtering entry is configured.
Views
Layer 2 Ethernet interface view, Layer 2 aggregate interface view
Default command level
2: System level
Parameters
ip-address: Permitted sender IP address.
mac-address: Permitted sender MAC address.
Usage guidelines
You can configure up to eight ARP filtering entries on a port.
You cannot configure both arp filter source and arp filter binding commands on a port.
Examples
# Configure an ARP filtering entry with permitted sender IP address 1.1.1.1 and MAC address 2-2-2.