Choose the menu
Network Security
→
ARP Inspection
→ARP Detect
to load the following page.
Figure 14-12 ARP Detect
Configuration Procedure:
1)
In the
Global Configuration
section, enable or disable the following features.
2)
In the
Enable VLAN
section, enable ARP Detect for the VLAN.
Entry Description:
Validate Source MAC:
Enable or disable the switch to check whether the source
MAC address and the Sender MAC address are the same
when receiving an ARP packet. If not, the ARP packet will be
discarded.
Validate Destination
MAC:
Enable or disable the switch to check whether the
Destination MAC address and the Target MAC address are
the same when receiving an ARP Reply packet. If not, the ARP
packet will be discarded.
Validate IP:
Enable or disable the switch to check whether the Sender IP
address of all ARP packets and the Target IP address of ARP
Reply packets are legal. The illegal packets will be discarded.
VLAN ID
Enable/Disable the ARP Detect function, and click the
Apply
button to apply.
Logging:
With this option enabled, a log will be generated when an ARP
packet is discarded.
347