Arp Inspection Commands - ZyXEL Communications Ethernet Switch Cli Reference Manual

C
HA P T E R

ARP Inspection Commands

Use these commands to filter unauthorized ARP packets in your network.
6.1 Command Summary
The following section lists the commands for this feature.
Table 14 arp inspection Command Summary
COMMAND
arp inspection
no arp inspection
show arp inspection
clear arp inspection statistics
clear arp inspection statistics
vlan <vlan-list>
show arp inspection statistics
show arp inspection statistics
vlan <vlan-list>
Table 15 Command Summary: arp inspection filter
COMMAND
show arp inspection filter
[<mac-addr>] [vlan <vlan-id>]
no arp inspection filter <mac-
addr> vlan <vlan-id>
clear arp inspection filter
arp inspection filter-aging-time
<1-2147483647>
arp inspection filter-aging-time
none
no arp inspection filter-aging-
time
Ethernet Switch CLI Reference Guide
DESCRIPTION
Enables ARP inspection on the Switch. You still have to
enable ARP inspection on specific VLAN and specify trusted
ports.
Disables ARP inspection on the Switch.
Displays ARP inspection configuration details.
Removes all ARP inspection statistics on the Switch.
Removes ARP inspection statistics for the specified VLAN(s). E
Displays all ARP inspection statistics on the Switch.
Displays ARP inspection statistics for the specified VLAN(s).
DESCRIPTION
Displays the current list of MAC address filters that were
created because the Switch identified an unauthorized ARP
packet. Optionally, lists MAC address filters based on the
MAC address or VLAN ID in the filter.
Specifies the ARP inspection record you want to delete from
the Switch. The ARP inspection record is identified by the
MAC address and VLAN ID pair.
Delete all ARP inspection filters from the Switch.
Specifies how long (1-2147483647 seconds) MAC address
filters remain in the Switch after the Switch identifies an
unauthorized ARP packet. The Switch automatically deletes
the MAC address filter afterwards.
Specifies the MAC address filter to be permanent.
Resets how long (1-2147483647 seconds) the MAC address
filter remains in the Switch after the Switch identifies an
unauthorized ARP packet to the default value.
6
M P
C 13
C 13
E 3
E 3
3
E 3
E 3
M P
E 3
E 13
E 13
C 13
C 13
C 13
33