Operation Manual – ARPH3C S3100 Series Ethernet Switches Chapter 1 ARP Configuration1-8Operation Command RemarksEnable the ARP entrychecking function (that is,disable the switch fromlearning ARP entries withmulticast MAC addresses)arp check enableOptionalBy default, the ARPentry checkingfunction is enabled.Caution:z Static ARP entries are valid as long as the Ethernet switch operates normally. Butsome operations, such as removing a VLAN, or removing a port from a VLAN, willmake the corresponding ARP entries invalid and therefore removed automatically.z As for the arp static command, the value of the vlan-id argument must be the ID ofan existing VLAN, and the port identified by the interface-type and interface-numberarguments must belong to the VLAN.z Currently, static ARP entries cannot be configured on the ports of an aggregationgroup.1.2.2 Configuring ARP Source MAC Address Consistency CheckTable 1-5 Configure ARP Source MAC Address Consistency CheckTo do… Use the command… RemarksEnter system view system-view —Enable ARP source MACaddress consistencycheckarp anti-attackvalid-check enableRequiredDisabled by default.1.2.3 Configuring ARP Attack DetectionTable 1-6 Configure the ARP attack detection functionOperation Command RemarksEnter system view system-view —Enable DHCP snooping dhcp-snoopingRequiredBy default, the DHCPsnooping function isdisabled.Enter Ethernet port view interface interface-typeinterface-number —
