1-9[SwitchB-gigabitethernet2/0/2] user-bind ip-address 10.1.1.6 mac-address 0001-0203-0607vlan 10[SwitchB-gigabitethernet2/0/2] quit# Enable the checking of the MAC addresses and IP addresses of ARP packets.[SwitchB] arp detection validate dst-mac ip src-macAfter the preceding configurations are completed, when ARP packets arrive at interfacesgigabitethernet 2/0/1 and gigabitethernet 2/0/2, their MAC and IP addresses are checked, and then thepackets are checked against the static IP Source Guard binding entries and finally DHCP snoopingentries.ARP Detection Configuration Example IINetwork requirementsAs shown in Figure 1-2, configure Switch A as a DHCP server and enable 802.1X on Switch B. EnableARP detection for VLAN 10 to allow only packets from valid clients to pass. Configure Host A and HostB as local 802.1X access users.Figure 1-2 Network diagram for ARP detection configurationConfiguration procedure1) Add all the ports on Switch B into VLAN 10, and configure the IP address of VLAN-interface 10 onSwitch A (the configuration procedure is omitted).2) Configure Switch A as a DHCP server# Configure DHCP address pool 0 system-view[SwitchA] dhcp enable[SwitchA] dhcp server ip-pool 0[SwitchA-dhcp-pool-0] network 10.1.1.0 mask 255.255.255.03) Configure Host A and Host B as 802.1X clients (the configuration procedure is omitted) andconfigure them to upload IP addresses for ARP detection.4) Configure Switch B# Enable the 802.1X function.
