Filtering ARP Packets

This section describes how to filter out ARP packets, including invalid ARP packets, gratuitous ARP packets, and ARP packets with non-null destination MAC addresses.

Context

Perform the following on the router to filter out ARP packets on its interfaces:

Procedure

Run system-view
The system view is displayed.
Run interface interface-type interface-number [sub-interface-number]
The interface view is displayed.
Run arp filter { gratuitous | mac-illegal | tha-filled-request }
The interface is configured to filter out invalid ARP packets.
You can decide which types of ARP packets are to be filtered out according to actual situations. The NetEngine 8000 F can filter out the following ARP packets:
- Invalid ARP packets
- Gratuitous ARP packets
- ARP packets whose destination MAC addresses are not null
Run commit
The configuration is committed.