Edge-Core ECS3510-10PD Management Manual page 939

Table 97: ARP Inspection Commands (Continued)
Command
ip arp inspection limit
ip arp inspection trust
show ip arp inspection
configuration
show ip arp inspection
interface
show ip arp inspection log
show ip arp inspection
statistics
show ip arp inspection vlan
This command enables ARP Inspection globally on the switch. Use the no
ip arp inspection
form to disable this function.
S
YNTAX
D
EFAULT
Disabled
C
OMMAND
Global Configuration
C
OMMAND
◆
◆
◆
◆
◆
Function
Sets a rate limit for the ARP packets received on a
port
Sets a port as trusted, and thus exempted from ARP
Inspection
Displays the global configuration settings for ARP
Inspection
Shows the trust status and inspection rate limit for
ports
Shows information about entries stored in the log,
including the associated VLAN, port, and address
components
Shows statistics about the number of ARP packets
processed, or dropped for various reasons
Shows configuration setting for VLANs, including ARP
Inspection status, the ARP ACL name, and if the
DHCP Snooping database is used after ACL validation
is completed
[no] ip arp inspection
S
ETTING
M
ODE
U
SAGE
When ARP Inspection is enabled globally with this command, it
becomes active only on those VLANs where it has been enabled with
the ip arp inspection vlan
When ARP Inspection is enabled globally and enabled on selected
VLANs, all ARP request and reply packets on those VLANs are
redirected to the CPU and their switching is handled by the ARP
Inspection engine.
When ARP Inspection is disabled globally, it becomes inactive for all
VLANs, including those where ARP Inspection is enabled.
When ARP Inspection is disabled, all ARP request and reply packets
bypass the ARP Inspection engine and their manner of switching
matches that of all other packets.
Disabling and then re-enabling global ARP Inspection will not affect the
ARP Inspection configuration for any VLANs.
– 939 –
| General Security Measures
C 24
HAPTER
command.
ARP Inspection
Mode
IC
IC
PE
PE
PE
PE
PE