Configure Basic Functions of ARP Check

Network Requirements

• PC1 and PC2 are connected to IP Network via Device.
• Configure the ARP Check basic function, realizing that PC1 can access IP Network normally and PC2 cannot access IP Network.

Network Topology

Figure 1–1 Networking of configuring the ARP Check basic functions

Configuration Steps

Step 1: Configure the link type of the VLAN and port on Device.

#Create VLAN2.

# Configure the link type of the port gigabitethernet0/1 as Access and permit the services of VLAN2 to pass.

Step 2: Configure the ARP Check function on Device.

#Enable the ARP Check function on the port gigabitethernet0/1 and configure the ARP Check binding entry with MAC address 0012.0100.0002 and IP address 192.168.1.2.

Step 3: Check the result.

#View the ARP Check configuration information.

Device#show arp-check brief  
Interface Name       Status       Binding Table  
gi0/1                Enable       Yes         
……

You can see that the port gigabitethernet0/1 is enabled with the ARP Check function, and there is the ARP Check entry.

#View the port ARP Check binding entry.

Device#show arp-check interface gigabitethernet0/1 
--------------------ARP Check Table---------------------
 FLAG Codes: 

-------------------------------------------------------------
Interface-Name  Status  MAC-Address        IP-Address Rate  PolicySource   SetHardware 
gi0/1           enable  0012.0100.0002     192.168.1.2  10   STATIC        active
total number: 1

#PC1 can access IP Network normally, but PC2 cannot access IP Network.