Configuration of Address Resolution Protocol (ARP) Inspection List on SFE/SGE Series Managed Switches

Objective

Address Resolution Protocol (ARP) provides IP communication within a Layer 2 broadcast domain by mapping an IP address to a MAC address. For example, Host B wants to send information to Host A but does not have the MAC address of Host A in its ARP cache. Host B generates a broadcast message for all hosts within the broadcast domain to obtain the MAC address associated with the IP address of Host A. All hosts within the broadcast domain receive the ARP request, and Host A responds with its MAC address.

The objective of this document is to guide the user on how to configure the ARP Inspection List and how to bind it to a VLAN Address. 

Applicable Devices

• SFE/SGE Series Managed Switches

Software Version

• v3.0.2.0

Add ARP Inspection List

The ARP Inspection List contains the list of trusted and mapped IP Address to the host MAC Address. This procedure will guide the user to add a new ARP.

Step 1. Log in the web configuration utility, choose Security Suite > ARP Inspection > ARP Inspection List. The ARP Inspection List page opens:

Step 2. In the Static ARP Table, click Add  to add a new ARP Inspection List Name.

Step 3. The Add ARP list window appears:

Step 4. In the IP Address field, enter a valid IP Address. This is a trusted IP address added to the ARP Inspection List and the layer 2 switch forwards requests only after it validates the IP address from the ARP List.

Step 5. In the MAC Address field, enter a valid MAC Address. The is the trusted MAC Address added to the ARP List.

Note: The IP Address and the MAC Address are related to each other.

Step 6. Click Apply.

Caution: This only saves your configuration to the running configuration file. This means any changes made will be lost if the device is rebooted. If you wish to save these changes even after a system reboot, you need to copy the running configuration file to the startup configuration file. See Copy Configuration File on SFE/SGE Series Managed Switches for more information on how to do this.

Static ARP Table Settings

The ARP Static Table panel lets you add static ARP entries that map a MAC address to an IP address for a given interface. Static ARP entries do not time out, and might help the user to solve a networking problem.

Step 1. Log in the web configuration utility, choose Security Suite > ARP Inspection > ARP Inspection List. The ARP Inspection List page opens:

Step 2. In the Static ARP Table box, click Add. The Add ARP Binding window appears:

Step 3. In the IP Address field, enter a valid IP Address.

Step 4. In the MAC Address field, enter a valid MAC address.

Note: The IP Address and the MAC Address are related to each other.

Step 5. Click Apply. The ARP Inspection List Name page opens:

Caution: This only saves your configuration to the running configuration file. This means any changes made will be lost if the device is rebooted. If you wish to save these changes even after a system reboot, you need to copy the running configuration file to the startup configuration file. See Copy Configuration File on SFE/SGE Series Managed Switches for more information on how to do this.

 Assigning ARP Inspection VLAN Settings

This procedure guides the user to bind the VLAN to an ARP Inspection List.

Step 1. Log in the web configuration utility, choose Security Suite > ARP Inspection > VLAN Settings. The VLAN Settings page opens:

Step 2. In the VLAN ID field, enter a valid VLAN ID and click Add.

Step 4. In the box below, click Add.

Step 4. The Add VLAN Settings window appears
Step 5. From the Bind List Name drop down list, choose Profile1.

Step 6. From the To VLAN drop down list, choose 111.

Step 7. Click Apply to save the configurations.

Caution: This only saves your configuration to the running configuration file. This means any changes made will be lost if the device is rebooted. If you wish to save these changes even after a system reboot, you need to copy the running configuration file to the startup configuration file. See Copy Configuration File on SFE/SGE Series Managed Switches for more information on how to do this.