No relevant resource is found in the selected language.

This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy>Search

Reminder

To have a better experience, please upgrade your IE browser.

upgrade

NE20E-S2 V800R010C10SPC500 Configuration Guide - IP Services 01

This is NE20E-S2 V800R010C10SPC500 Configuration Guide - IP Services
Rate and give feedback:
Huawei uses machine translation combined with human proofreading to translate this document to different languages in order to help you better understand the content of this document. Note: Even the most advanced machine translation cannot match the quality of professional translators. Huawei shall not bear any responsibility for translation accuracy and it is recommended that you refer to the English document (a link for which has been provided).
Example for Configuring Static ARP

Example for Configuring Static ARP

This example provides an example for configuring static ARP.

Networking Requirements

ARP is a basic link layer protocol that maps devices' IP addresses to MAC addresses. ARP is simple to use but does not have any security guarantee. Attackers may send forged ARP packets to attack networks, interrupting normal services or even breaking devices down. Therefore, carriers want to enhance backbone network security.

As shown in Figure 2-6, hosts connect to the backbone network through routers. To protect the devices on the backbone network against ARP attacks and ensure stable data transmission, configure static ARP on routers.

Figure 2-6 Configuring static ARP

Precautions

None

Configuration Roadmap

The configuration roadmap is to configure static ARP entries on routers. These entries will not be aged or overwritten by dynamic ARP entries so that user data can be stably transmitted.

Data Preparation

To complete the configuration, you need IP addresses and MAC addresses between which mappings need to be set up.

Procedure

  1. Configure static ARP entries on Device A.

    <HUAWEI> system-view
    [~HUAWEI] sysname DeviceA
    [*HUAWEI] commit
    [~DeviceA] arp static 10.1.1.1 0000-0a41-0200
    [*DeviceA] arp static 10.1.1.2 0000-0a41-0202
    [*DeviceA] arp static 10.1.1.3 0000-0a41-0204
    [*DeviceA] commit
    Repeat this step for Device B. For configuration details, see Configuration Files in this section.

  2. Verify the configuration.

    # Run the display arp all command on Device A to check configured ARP entries.
    <DeviceA> display arp all
    IP ADDRESS      MAC ADDRESS    EXPIRE(M) TYPE        INTERFACE   VPN-INSTANCE
                                             VLAN/CEVLAN PVC
    ------------------------------------------------------------------------------
    10.1.1.1        0000-0a41-0200           S--
    10.1.1.2        0000-0a41-0202           S--
    10.1.1.3        0000-0a41-0204           S--
    ------------------------------------------------------------------------------
    Total:3         Dynamic:0       Static:3    Interface:0   
    Redirect:0

Configuration Files

  • Device A configuration file

    #
    sysname DeviceA
    #
    arp static 10.1.1.1 0000-0a41-0200
    arp static 10.1.1.2 0000-0a41-0202
    arp static 10.1.1.3 0000-0a41-0204
    #
    return
  • Device B configuration file

    #
    sysname DeviceB
    #
    arp static 10.1.2.1 0000-0a41-0300
    arp static 10.1.2.2 0000-0a41-0302
    arp static 10.1.2.3 0000-0a41-0304
    #
    return
Translation
Download
Updated: 2019-01-02

Document ID: EDOC1100055376

Views: 15352

Downloads: 33

Average rating:
This Document Applies to these Products
Related Version
Related Documents
Share
Previous Next