ARP Guard Configuration Guidelines

Implementing ARP Guard requires creating ARP ACLs, then applying and enabling them on interfaces and port-channels.

Follow these guidelines when implementing ARP Guard.

ARP Guard is supported on physical interfaces and port-channels.
ARP Guard is not supported on Layer 3 interfaces.
ARP Guard requires that the switchport command be implemented on the interface.
If ARP Guard is enabled on a port-channel and a member port is removed, ARP Guard properties are retained on the removed port.
On an interface where ARP Guard is enabled, you must limit the rate of ARP traffic by a Layer 2 ACL. For more information about the ACL, see Create an ARP Access Control List.

The following table indicates which hardware profiles support the various types of ARP Guard implementation. For more information, see the show hardware profile command in Extreme SLX-OS Command Reference.

Table 1. Profile Support for ARP Guard
Profile	Basic ARP Guard	ARP Guard with Rate Limiting	ARP Guard on VPLS Endpoint	ARP Guard on VPLS End- point with Rate Limiting
default	Yes	Yes	Yes	Yes
vxlan-visibility	Yes	No	No	No