2-8z dst-mac: Checks the target MAC address of ARP replies. If the target MAC address is all-zero,all-one, or inconsistent with the destination MAC address in the Ethernet header, the packet isconsidered invalid and discarded.z ip: Checks both the source and destination IP addresses in an ARP packet. The all-zero, all-one ormulticast IP addresses are considered invalid and the corresponding packets are discarded. Withthis object specified, the source and destination IP addresses of ARP replies, and the source IPaddress of ARP requests are checked.Before performing the following configuration, make sure you have configured the arp detectionenable command.Follow these steps to configure ARP detection based on specified objects:To do… Use the command… RemarksEnter system view system-view —Specify objects for ARPdetectionarp detection validate { dst-mac | ip |src-mac } *RequiredNot specified by default.Displaying and Maintaining ARP DetectionTo do… Use the command… RemarksDisplay the VLANs enabledwith ARP detection display arp detection Available in any viewDisplay the ARP detectionstatisticsdisplay arp detection statistics [ interfaceinterface-type interface-number ] Available in any viewClear the ARP detectionstatisticsreset arp detection statistics [ interfaceinterface-type interface-number ] Available in user viewARP Detection Configuration ExampleNetwork requirementsAs shown in Figure 2-2, enable DHCP snooping on Switch A. Enable ARP detection for VLAN 10 toallow only packets from valid clients to pass. Configure Host A and Host B as DHCP clients.
