HP MSR2000/3000/4000 Router Series Security Command Reference

409
Examples
# Enable ARP gateway protection for the gateway with IP address 1.1.1.1.
<Sysname> system-view
[Sysname] interface ethernet 1/1
[Sysname-Ethernet1/1] arp filter source 1.1.1.1
ARP filtering commands
NOTE:
A
RP filterin
g
is not supported in the current release, and i
t
is reserved for future use.
arp filter binding
Use arp filter binding to configure an ARP permitted entry. If the sender IP and MAC addresses of an ARP
packet match an ARP permitted entry, the ARP packet is permitted. If not, it is discarded.
Use undo arp filter binding to remove an ARP permitted entry.
Syntax
arp filter binding ip-address mac-address
undo arp filter binding ip-address
Default
No ARP permitted entry is configured.
Views
Layer 2 Ethernet interface view
Predefined user roles
network-admin
Parameters
ip-address: Permitted sender IP address.
mac-address: Permitted sender MAC address.
Usage guidelines
You can configure up to eight ARP permitted entries on an interface.
You cannot configure both the arp filter source and arp filter binding commands on the same interface.
Examples
# Configure an ARP permitted entry.
<Sysname> system-view
[Sysname] interface ethernet 1/1
[Sysname-Ethernet1/1] arp filter binding 1.1.1.1 2-2-2