ARP filtering configuration example

Network requirements

As shown in Figure 121, the IP and MAC addresses of Host A are 10.1.1.2 and 000f-e349-1233 respectively. The IP and MAC addresses of Host B are 10.1.1.3 and 000f-e349-1234 respectively.

Configure ARP filtering on GigabitEthernet 1/0/1 and GigabitEthernet 1/0/2 of Switch B to permit ARP packets from the two hosts only.

Figure 121: Network diagram

Configuration procedure

# Configure ARP filtering on Switch B.

<SwitchB> system-view
[SwitchB] interface gigabitethernet 1/0/1
[SwitchB-GigabitEthernet1/0/1] arp filter binding 10.1.1.2 000f-e349-1233
[SwitchB-GigabitEthernet1/0/1] quit
[SwitchB] interface gigabitethernet 1/0/2
[SwitchB-GigabitEthernet1/0/2] arp filter binding 10.1.1.3 000f-e349-1234

After the configuration is complete, GigabitEthernet 1/0/1 will permit ARP packets from Host A, and discard other ARP packets. GigabitEthernet 1/0/2 will permit ARP packets from Host B and discard other ARP packets.