ARP packet checking against the binding table on S series switches

On S series switches (except S1700 switches), run the arp anti-attack check user-bind enable command in an interface view or the VLAN view to enable ARP packet checking against the binding table.
After the preceding configuration, the device checks whether the ARP packets passing through an interface or a VLAN match the binding table. Only the ARP packets match the binding table are forwarded. This function prevents ARP packets from unauthorized users from entering the external network through the switch and protects authorized users against interference or spoofing.

Scroll to top