D-Link xStack DGS-3420 Series Reference Manual page 510

xStack® DGS-3420 Series Layer 2 Managed Stackable Gigabit Switch CLI Reference Guide
Parameters
<portlist> - Specify a range of ports to configure.
all - Specify to configure all ports.
arp_inspection - (Optional) Specifies that when the ARP inspection function is enabled, the legal
ARP packets wil be forwarded, while the illegal packets will be dropped.
strict - Specifies that in this mode, all packets are dropped by default until a legal ARP or IP
packet is detected.
loose - Specifies that in this mode, all packets are forwarded by default until an illegal ARP packet
is detected.
disable - Disable the ARP inspection function. The default value is disable.
ip_inspection - (Optional) Specifies the IP inspection function state.
enable - Specifies to enable the IP inspection function. The legal IP packets will be forwarded,
while the illegal IP packets will be dropped.
disable - Specifies to disable the IP inspection function. The default value is disable.
nd_inspection - Specifies the ports' ND inspection state.
enable - Specifies to enable the ND inspection function. The legal ND packets will be forwarded,
while the illegal packets will be dropped.
disable - Specifies to disable the ND inspection function. The default value is disabled.
protocol - (Optional) Specifies the IP protocoal of the packets that will be checked.
ipv4 - Specifies that only IPv4 packets will be checked.
ipv6 - Specifies that only IPv6 packets will be checked.
all - Specifies that both IPv4 and IPv6 packets will be checked.
allow_zeroip - (Optional) Specify whether to allow ARP packets with SIP address 0.0.0.0.
enable - If 0.0.0.0 is not configured in the binding list, when it is set to enabled, the ARP packet
with this source IP address 0.0.0.0 will be allowed.
disable - When set to disable, this option does not affect the IP-MAC-port binding IP Inspection.
forward_dhcppkt - (Optional) By default, the DHCP packets with broadcast DA will be flooded.
enable - This setting is effective when DHCP snooping is enabled because the DHCP packet
which has been trapped to CPU needs to be forwarded by the software. This setting controls
the forwarding behaviour under this situation.
disable - When set to disable, the broadcast DHCP packets received by the specified port will not
be forwarded.
stop_learning_threshold - (Optional) Enter the stop learning threshold value here.
<int 0-500> - The stop learning threshold value must be between 0 and 500.
Restrictions
Only Administrator, Operator and Power-User level users can issue this command.
Example
To configure port 1 to be enabled for address binding:
DGS-3420-28SC:admin# config address_binding ip_mac ports 1 arp_inspection strict
ip_inspection enable protocol ipv4
Command: config address_binding ip_mac ports 1 arp_inspection strict ip_inspection
enable protocol ipv4
Success.
DGS-3420-28SC:admin#
505