Example: Configuring ARP filtering

Network configuration

As shown in Figure 166, the IP and MAC addresses of Host A are 10.1.1.2 and 000f-e349-1233, respectively. The IP and MAC addresses of Host B are 10.1.1.3 and 000f-e349-1234, respectively.

Configure ARP filtering on HundredGigE 1/0/1 and HundredGigE 1/0/2 of Device B to permit ARP packets from only Host A and Host B.

Figure 166: Network diagram

Procedure

# Configure ARP filtering on Device B.

<DeviceB> system-view
[DeviceB] interface hundredgige 1/0/1
[DeviceB-HundredGigE1/0/1] arp filter binding 10.1.1.2 000f-e349-1233
[DeviceB-HundredGigE1/0/1] quit
[DeviceB] interface hundredgige 1/0/2
[DeviceB-HundredGigE1/0/2] arp filter binding 10.1.1.3 000f-e349-1234

Verifying the configuration

# Verify that HundredGigE 1/0/1 permits ARP packets from Host A and discards other ARP packets.

# Verify that HundredGigE 1/0/2 permits ARP packets from Host B and discards other ARP packets.