Figure 1-1
Network diagram for configuring static ARP entries
Etherent0/0/1
Etherent0/0/2
Etherent0/0/0
Ethernet2/0/0
R&D department
Marketing department
Headquarters office
Router
10.164.2.0/24
10.164.3.0/24
10.164.1.0/24
10.164.10.1/24
VLAN 20
VLAN 30
VLAN 10
PC A
0df0-fc01-003a
10.164.1.1/24
00e0-fc01-0001
File backup server
Configuration Roadmap
The configuration roadmap is as follows:
1.
Configure static ARP entries for hosts in the headquarters office on the Router to prevent
ARP entries of the hosts in the headquarters office from being modified in ARP attack
packets.
2.
Configure a static ARP entry for the file backup server on the Router to prevent the ARP
entry of the file backup server from being modified in ARP attack packets.
Data Preparation
To complete the configuration, you need the following data:
l
Interface connecting the Router and hosts in the headquarters office: Ethernet0/0/0
l
ID of the VLAN that Ethernet0/0/0 joins: VLAN 10
l
IP address of VLANIF10: 10.164.1.20/24
l
Network segment where the IP addresses of hosts in the headquarters office are located:
10.164.1.0/24 (PC A with IP address 10.164.1.1 is used as an example. The IP address
10.164.1.1 maps the MAC address 00e0-fc01-0001.)
l
Interface connecting the Router and the file backup server: Ethernet2/0/0
l
IP address of Ethernet2/0/0: 10.164.10.10/24
l
IP address of the file backup server: 10.164.10.1/24 (corresponding MAC address 0df0-
fc01-003a)
Huawei AR150&200 Series Enterprise Routers
Configuration Guide - IP Service
1 ARP Configuration
Issue 02 (2012-03-30)
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
25