Configuring ARP restricted forwarding
![[NOTE: ]](images/note.png) | NOTE: ARP restricted forwarding does not apply to ARP packets with multiport MAC as their destination MAC addresses. | |
ARP restricted forwarding controls the forwarding of ARP packets that are received on untrusted interfaces and have passed user validity check as follows:
If the packets are ARP requests, they are forwarded through the trusted interface.
If the packets are ARP replies, they are forwarded according to their destination MAC address. If no match is found in the MAC address table, they are forwarded through the trusted interface.
Configure user validity check before you configure ARP restricted forwarding.
To enable ARP restricted forwarding:
Step | Command | Remarks |
|---|---|---|
1. Enter system view. | system-view | N/A |
2. Enter VLAN view. | vlan vlan-id | N/A |
3. Enable ARP restricted forwarding. | arp restricted-forwarding enable | By default, ARP restricted forwarding is disabled. |