| Security Measures
C
13
HAPTER
ARP Inspection
C
ONFIGURING
I
S
NTERFACE
ETTINGS
ARP I
FOR
NSPECTION
ARP Inspection ACL Name
◆
ARP ACL – Allows selection of any configured ARP ACLs.
■
(Default: None)
Static – When an ARP ACL is selected, and static mode also
■
selected, the switch only performs ARP Inspection and bypasses
validation against the DHCP Snooping Bindings database. When an
ARP ACL is selected, but static mode is not selected, the switch first
performs ARP Inspection and then validation against the DHCP
Snooping Bindings database. (Default: Disabled)
W
I
EB
NTERFACE
To configure VLAN settings for ARP Inspection:
Click Security, ARP Inspection.
1.
Select Configure VLAN from the Step list.
2.
Enable ARP inspection for the required VLANs, select an ARP ACL filter
3.
to check for configured addresses, and select the Static option to
bypass checking the DHCP snooping bindings database if required.
Click Apply.
4.
Figure 180: Configuring VLAN Settings for ARP Inspection
Use the Security > ARP Inspection (Configure Interface) page to specify
the ports that require ARP inspection, and to adjust the packet inspection
rate.
CLI R
EFERENCES
"ARP Inspection" on page 699
◆
P
ARAMETERS
These parameters are displayed:
Port – Port identifier.
◆
Trust Status – Configures the port as trusted or untrusted.
◆
(Default: Untrusted)
– 334 –