Cisco SX350 Series Administration Manual page 482

Security
ARP Inspection
STEP 2
STEP 1
STEP 2
STEP 3
STEP 1
STEP 2
STEP 3
STEP 4
Cisco Sx350, SG350X, SG350XG, Sx550X & SG550XG Series Managed Switches, Firmware Release 2.2.5.x
- Never—Disabled SYSLOG dropped packet messages.
Click Apply. The settings are defined, and the Running Configuration file is updated.
Interfaces Settings
Packets from untrusted ports/LAGs are checked against the ARP Access Rules table and the
DHCP Snooping Binding database if DHCP Snooping is enabled (see the
Binding Database page).
By default, ports/LAGs are ARP Inspection untrusted.
To change the ARP trusted status of a port/LAG:
Click Security > ARP Inspection > Interface Settings.
The ports/LAGs and their ARP trusted/untrusted status are displayed.
To set a port/LAG as untrusted, select the port/LAG and click Edit.
Select Trusted or Untrusted and click Apply to save the settings to the Running
Configuration file.
ARP Access Control
To add entries to the ARP Inspection table:
Click Security > ARP Inspection > ARP Access Control.
To add an entry, click Add.
Enter the fields:
• ARP Access Control Name—Enter a user-created name.
• IP Address—IP address of packet.
• MAC Address—MAC address of packet.
Click Apply. The settings are defined, and the Running Configuration file is updated.
16
DHCP Snooping
326