1-6Operation Command RemarksConfigure the ARP aging timer arp timer aging aging-timeOptionalBy default, the ARP agingtimer is set to 20 minutes.Enable the ARP entry checkingfunction (that is, disable the switchfrom learning ARP entries withmulticast MAC addresses)arp check enableOptionalBy default, the ARP entrychecking function isenabled.z Static ARP entries are valid as long as the Ethernet switch operates normally. But some operations,such as removing a VLAN, or removing a port from a VLAN, will make the corresponding ARPentries invalid and therefore removed automatically.z As for the arp static command, the value of the vlan-id argument must be the ID of an existingVLAN, and the port identified by the interface-type and interface-number arguments must belong tothe VLAN.z Currently, static ARP entries cannot be configured on the ports of an aggregation group.Configuring ARP Attack DetectionTable 1-5 Configure the ARP attack detection functionOperation Command RemarksEnter system view system-view —Enable DHCP snooping dhcp-snoopingRequiredBy default, the DHCP snoopingfunction is disabled.Enter Ethernet port view interface interface-typeinterface-number —Specify the current port as atrusted port dhcp-snooping trustRequiredBy default, after DHCP snooping isenabled, all ports of a switch areuntrusted ports.Quit to system view quit —Enter VLAN view vlan vlan-id —Enable the ARP attackdetection function arp detection enableRequiredBy default, ARP attack detection isdisabled on all ports.Quit to system view quit —Enter Ethernet port view interface interface-typeinterface-number —
