H3C Technologies H3C S5120 Series Switches - Manual (Page 226)

1-5
Enabling the ARP Entry Check
The ARP entry check function disables the device from learning multicast MAC addresses. With the
ARP entry check enabled, the device cannot learn any ARP entry with a multicast MAC address, and
configuring such a static ARP entry is not allowed; otherwise, the system displays error messages.
After the ARP entry check is disabled, the device can learn the ARP entry with a multicast MAC address,
and you can also configure such a static ARP entry on the device.
Follow these steps to enable the ARP entry check:
To do… Use the command… Remarks
Enter system view system-view —
Enable the ARP entry check arp check enable
Optional
By default, the device is disabled from
learning multicast MAC addresses.
ARP Configuration Example
Network requirements
As shown in Figure 1-3 , hosts are connected to Switch, which is connected to Router through interface
GigabitEthernet1/0/1 belonging to VLAN 10. The IP address of Router is 192.168.1.1/24. The MAC
address of Router is 00e0-fc01-0000.
To enhance communication security for Router and Switch, static ARP entries are configured on Switch.
Figure 1-3 Network diagram for configuring static ARP entries
Configuration procedure
Configure Switch
# Create VLAN 10.
<Switch> system-view
[Switch] vlan 10
[Switch-vlan10] quit
# Add interface GigabitEthernet 1/0/1 to VLAN 10.