arp filter

Function

The arp filter command enables an interface to filter ARP packets.

The undo arp filter command disables an interface from filtering ARP packets.

By default, the interface is not enabled to filter invalid ARP packets, gratuitous ARP packets, or the ARP packets whose destination MAC addresses are not null.

Format

arp filter gratuitous

arp filter mac-illegal

arp filter tha-filled-request

undo arp filter gratuitous

undo arp filter mac-illegal

undo arp filter tha-filled-request

Parameters

Parameter	Description	Value
mac-illegal	Indicates the ARP packets with invalid MAC addresses, including the ARP Request packets whose destination MAC addresses are unicast addresses, the ARP Request packets whose source MAC addresses are non-unicast addresses, and the ARP Reply packets whose destination MAC addresses are non-unicast addresses.	-
tha-filled-request	Indicates the ARP Request packets whose destination MAC addresses are not null.	-
gratuitous	Indicates the gratuitous ARP packets.	-

Parameter

Description

Value

mac-illegal

Indicates the ARP packets with invalid MAC addresses, including the ARP Request packets whose destination MAC addresses are unicast addresses, the ARP Request packets whose source MAC addresses are non-unicast addresses, and the ARP Reply packets whose destination MAC addresses are non-unicast addresses.

tha-filled-request

Indicates the ARP Request packets whose destination MAC addresses are not null.

gratuitous

Indicates the gratuitous ARP packets.

Views

100GE interface view, 10G LAN interface view, 10G WAN interface view, 40GE interface view, Eth-Trunk sub-interface view, Eth-Trunk interface view, GE optical interface view, GE electrical interface view, VBDIF interface view, VLANIF interface view

Default Level

2: Configuration level

Task Name and Operations

Task Name	Operations
cpu-defend	write

Usage Guidelines

Usage Scenario

The arp filter command can be used to filter ARP packets.

Example

# Filter out the ARP Request packets whose destination MAC addresses are not null.

<HUAWEI> system-view
[~HUAWEI] interface GigabitEthernet 0/1/0
[~HUAWEI-GigabitEthernet0/1/0] arp filter tha-filled-request