Show Ip Arp Inspection Log; Show Ip Arp Inspection Statistics; Show Ip Arp Inspection Vlan - Edge-Core ES3510MA-DC Management Manual

show ip arp
inspection log
show ip arp
inspection statistics
show ip arp
inspection vlan
This command shows information about entries stored in the log, including
the associated VLAN, port, and address components.
C M
OMMAND ODE
Privileged Exec
E
XAMPLE
Console#show ip arp inspection log
Total log entries number is 1
Num VLAN Port Src IP Address
--- ---- ---- --------------
1 1 11 192.168.2.2
Console#
This command shows statistics about the number of ARP packets
processed, or dropped for various reasons.
C M
OMMAND ODE
Privileged Exec
E
XAMPLE
Console#show ip arp inspection log
Total log entries number is 1
Num VLAN Port Src IP Address
--- ---- ---- --------------
Console#show ip arp inspection statistics
ARP packets received before rate limit
ARP packets dropped due to rate limt
Total ARP packets processed by ARP Inspection
ARP packets dropped by additional validation (source MAC address)
ARP packets dropped by additional validation (destination MAC address): 0
ARP packets dropped by additional validation (IP address)
ARP packets dropped by ARP ACLs
ARP packets dropped by DHCP snooping
Console#
This command shows the configuration settings for VLANs, including ARP
Inspection status, the ARP ACL name, and if the DHCP Snooping database
is used after ARP ACL validation is completed.
S
YNTAX
show ip arp inspection vlan [vlan-id | vlan-range]
vlan-id - VLAN ID. (Range: 1-4093)
vlan-range - A consecutive range of VLANs indicated by the use a
hyphen, or a random group of VLANs with each entry separated by
a comma.
– 695 –
| General Security Measures
C 25
HAPTER
Dst IP Address Src MAC Address
-------------- ---------------
192.168.2.1 00-04-E2-A0-E2-7C FF-FF-FF-FF-FF-FF
Dst IP Address Src MAC Address
-------------- ---------------
ARP Inspection
Dst MAC Address
--------------
Dst MAC Address
-----------
: 150
: 5
: 150
: 0
: 0
: 0
: 0