Overview ARP Check

ARP Check is one function of checking the validity of the ARP packet, preventing the invalid ARP packet from passing and improving the network security.

The validity check of the ARP packet is based on the port binding entry. The binding entry includes two types:

Static binding entry: Manual configured static binding entry;

Dynamic binding entry: Dynamically generated by the valid entry of the DHCP Snooping function and 802.1X function.

The checking principle of ARP Check is as follows:

In the ARP packet received by the port, check the sending IP address, source MAC address to match the port ARP Check binding entry. If matching, the ARP packet is valid packet and is forwarded directly. Otherwise, the ARP packet is invalid packet and is dropped.