DES-7200 Configuration Guide Chapter 5 Port-based Flow Control Configuration
5-14
z In the enabled mode, ARP Check function is enabled or disabled according to the
current security function running state on the switch.
Enabling/disabling the following functions may trigger to enable/disable the ARP
Check function:
1. Global IP+MAC binding
2. 802.1X IP authorizaiton
3. IP Source Guard
4. GSN binding
Adding the legal user for the first time or removing the last legal user may trigger to
enable/disable the ARP Check function:
1. IP+MAC binding mode for the port security
2. IP-only mode for the port security
ARP check is enabled no matter whether there is security configuration. If there is no
legal user on the port, all the arp packets from this port will be discarded.
z In the disabled mode, ARP packet on the port is not checked.
Caution
1. Enabling ARP check of port security addresses will decrease the
maximum number of the security addresses of binding IP on all the
ports by half.
5.4.2 Configuring ARP-CHECK
Use the following commands to configure ARP-CHECK in the privileged mode:
Command Action
DES-7200# configure t
Enter the global configuration mode.
DES-7200(config)#interface
interface-id
Enter the interface configuration mode.
DES-7200(config-if)# arp-check
Enable arp check.
DES-7200(config-if)# no arp-check
Disable arp check.
DES-7200(config-if)#arp-check auto
Restore to the default configuration: enabled.