D-Link DGS-1510 Series Reference Manual page 228

DGS-1510 Series Gigabit Ethernet SmartPro Switch CLI Reference Guide
ip
Default
By default, this option is disabled.
Command Mode
Global Configuration Mode.
Command Default Level
Level: 12.
Usage Guideline
Use this command to specify the additional checks to be performed during the dynamic ARP
inspection check. The specified check will be performed on packets arriving at the untrusted interface
and belong to the VLANs that are enabled for IP ARP inspection. If no parameters are specified, all
options are enabled or disabled. Use the no form of this command with the specific option to disable
the specific type of check.
Example
This example shows how to enable source MAC validation.
Switch# configure terminal
Switch(config)# ip arp inspection validate src-mac
Switch(config)#
26-9 ip arp inspection vlan
This command is used to enable specific VLANs for dynamic ARP inspection. Use the no form of this
command to disable dynamic ARP inspection for VLAN.
ip arp inspection vlan VLAN-ID [, | -]
no ip arp inspection vlan VLAN-ID [, | -]
Parameters
vlan VLAN-ID
,
-
Default
By default, ARP inspection is disabled on all VLANs.
Command Mode
consistency of the destination MAC address in the Ethernet header
against the target MAC address in the ARP payload.
(Optional) Specifies to check the ARP body for invalid and
unexpected IP addresses. Specifies to check the validity of IP
address in the ARP payload. The sender IP in both the ARP request
and response and target IP in the ARP response are validated.
Packets destined for the IP addresses 0.0.0.0, 255.255.255.255,
and all IP multicast addresses are dropped. Sender IP addresses
are checked in all ARP requests and responses, and target IP
addresses are checked only in ARP responses.
Specifies the VLAN to enable or disable the ARP inspection
function.
(Optional) Specifies a series of interfaces, or separate a range of
interfaces from a previous range. No space is allowed before and
after the comma.
(Optional) Specifies a range of interfaces. No space is allowed
before and after the hyphen.
225