{"id":6294,"date":"2026-05-04T12:01:59","date_gmt":"2026-05-04T12:01:59","guid":{"rendered":"https:\/\/docs.connexite.co.uk\/index.php\/connexite-documentation\/synapse-cli-documentation\/cli-configuring-arp-check\/"},"modified":"2026-05-04T12:04:44","modified_gmt":"2026-05-04T12:04:44","slug":"cli-configuring-arp-check","status":"publish","type":"page","link":"https:\/\/docs.connexite.co.uk\/index.php\/connexite-documentation\/synapse-cli-documentation\/cli-configuring-arp-check\/","title":{"rendered":"Configuring Arp-check"},"content":{"rendered":"<h2 class=\"connexite-doc-h2\">Overview of Arp-check<\/h2>\n<p>Arp-check is a per-interface traffic filter that permits ARP traffic only when the IP address and MAC address of each packet matches one of two sources of IP and MAC address bindings: Entries in the Dynamic Host Configuration Protocol (DHCP) snooping binding table; Static IP source entries that you configure. Filtering on trusted IP and MAC address bindings helps prevent spoofing attacks, in which an attacker uses the IP address of a valid host to gain unauthorized network access.<\/p>\n<h2 class=\"connexite-doc-h2\">Note<\/h2>\n<ul class=\"connexite-doc-list\">\n<li>Only support L2 port for port security, such as physical port and L2 AP port.<\/li>\n<li>Do not support AP member port configuration port security function.<\/li>\n<\/ul>\n<h2 class=\"connexite-doc-h2\">Configuring<\/h2>\n<ul class=\"connexite-doc-list\">\n<li>Enabling Arp-check on the Interface<\/li>\n<\/ul>\n<pre class=\"connexite-doc-command\"><code>SWITCH(config-if)#arp-check<\/code><\/pre>\n<pre class=\"connexite-doc-command\"><code>SWITCH(config-if)#no arp-check<\/code><\/pre>\n<p class=\"connexite-doc-command-desc\">Enables Arp-check on the interface.<\/p>\n<h2 class=\"connexite-doc-h2\">Examples<\/h2>\n<p>Example 1\uff1aThis is an example of Arp-check typical application. Arp-check is enabled on the interface gigabitEthernet0\/1, and we enter 3 static binding entrys on the interface. When the interface gigabitEthernet0\/1 receives a ARP packet, If the IP address and the MAC address of the packet differs from the list of static entrys, the packet will be dropped.<\/p>\n<pre class=\"connexite-doc-command\"><code>SWITCH(config)#interface gigabitEthernet0\/1<\/code><\/pre>\n<pre class=\"connexite-doc-command\"><code>SWITCH(config-if)#ip verify source<\/code><\/pre>\n<pre class=\"connexite-doc-command\"><code>SWITCH(config-if)#arp-check<\/code><\/pre>\n<pre class=\"connexite-doc-command\"><code>SWITCH(config)#ip source binding 0001.0001.0001 vlan 1 1.1.1.10 interface gigabitEthernet0\/1<\/code><\/pre>\n<pre class=\"connexite-doc-command\"><code>SWITCH(config)#ip source binding 0001.0001.0002 vlan 1 1.1.1.11 interface gigabitEthernet0\/1<\/code><\/pre>\n<pre class=\"connexite-doc-command\"><code>SWITCH(config)#ip source binding 0001.0001.0003 vlan 1 1.1.1.12 interface gigabitEthernet0\/1<\/code><\/pre>\n","protected":false},"excerpt":{"rendered":"<p>Networking \u203a Switching \u203a Edge \u203a Synapse<\/p>\n","protected":false},"author":0,"featured_media":0,"parent":6270,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"footnotes":""},"class_list":["post-6294","page","type-page","status-publish","hentry","no-post-thumbnail"],"acf":[],"_links":{"self":[{"href":"https:\/\/docs.connexite.co.uk\/index.php\/wp-json\/wp\/v2\/pages\/6294","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/docs.connexite.co.uk\/index.php\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/docs.connexite.co.uk\/index.php\/wp-json\/wp\/v2\/types\/page"}],"replies":[{"embeddable":true,"href":"https:\/\/docs.connexite.co.uk\/index.php\/wp-json\/wp\/v2\/comments?post=6294"}],"version-history":[{"count":1,"href":"https:\/\/docs.connexite.co.uk\/index.php\/wp-json\/wp\/v2\/pages\/6294\/revisions"}],"predecessor-version":[{"id":6341,"href":"https:\/\/docs.connexite.co.uk\/index.php\/wp-json\/wp\/v2\/pages\/6294\/revisions\/6341"}],"up":[{"embeddable":true,"href":"https:\/\/docs.connexite.co.uk\/index.php\/wp-json\/wp\/v2\/pages\/6270"}],"wp:attachment":[{"href":"https:\/\/docs.connexite.co.uk\/index.php\/wp-json\/wp\/v2\/media?parent=6294"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}