锐捷学习笔记-24（ARP Check）

锐捷的ARP的配置命令
R1
interface vlan 10
ip address 192.168.1.254 255.255.255.0
service dhcp
ip dhcp pool ruijie
network 192.168.1.0 255.255.255.0
dns-server 211.138.106.2 211.138.106.7
default-router 192.168.1.254

SW1
ip dhcp snooping
interface gigabitEthernet 0/24 
ip dhcp snooping trust                                             /DHCP  Snooping

 ip source binding C000.0000.000C vlan 10
192.168.1.3 interface Gi 0/3
interface range gi0/1-3
switch access vlan 10
ip verify source port-security
注：PC-A和PC-B通过DHCP获取IP地址，PC-C手工配置IP地址          /IP Source Guard

interface range gi0/1-3
switch access vlan 10
ip verify source port-security
arp-check
anti-arp-spoofing ip 192.168.1.254                                       /ARP Check