Filter
Top Products
xStack
®
DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual
93
12
ARP SPOOFING PREVENTION COMMANDS
The ARP Spoofing Prevention commands in the Command Line Interface (CLI) are listed (along with the appropriate
parameters) in the following table.
Command Parameters
config arp_spoofing_prevention [add gateway_ip <ipaddr> gateway_mac <macaddr> ports [<portlist> | all] |
delete gateway_ip <ipaddr>]
show arp_spoofing_prevention
Each command is listed, in detail, in the following sections.
config arp_spoofing_prevention
Purpose The user can configure the spoofing prevention entry to prevent spoofing of MAC for the
protected gateway.
Syntax
config arp_spoofing_prevention [add gateway_ip <ipaddr> gateway_mac <macaddr>
ports [<portlist> | all] | delete gateway_ip <ipaddr>]
Description The user can configure the spoofing prevention entry to prevent spoofing of MAC for the
protected gateway. When an entry is created, those ARP packets whose sender IP matches
the gateway IP of an entry, but either its sender MAC field or source MAC field doesnot
match the gateway MAC of the entry will be dropped by the system.
Parameters
add - Specifies to add an ARP spoofing prevention entry.
gateway_ip - Specifies a gateway IP address to be configured.
<ipaddr> - Enter the IP address used for this configuration here.
gateway_mac - Specifies a gateway MAC address to be configured.
<macaddr> - Enter the MAC address used for this configuration here.
ports - Specifies a range of ports to be configured.
<portlist> - Enter a list of ports used for the configuration here.
all - Specifies all of ports to be configured.
delete - Specifies to delete an ARP spoofing prevention entry.
gateway_ip - Specifies a gateway ip to be configured.
<ipaddr> - Enter the IP address used for this configuration here.
Restrictions Only Administrator and Operator-level users can issue this command.
Example usage:
To configure the ARP spoofing prevention entry:
DGS-3627:admin# config arp_spoofing_prevention add gateway_ip 10.254.254.251 gateway_mac
00-00-00-11-11-11 ports 1-2
Command: config arp_spoofing_prevention add gateway_ip 10.254.254.251 gateway_mac 00-00-
00-11-11-11 ports 1-2
Success.
DGS-3627:admin#