Edge-Core ECS4620-28T Quick Start Manual page 1196

Chapter 9
| General Security Measures
ARP Inspection
ip arp inspection
This section describes commands used to configure ARP Inspection.
Table 63: ARP Inspection Commands
Command
ip arp inspection
ip arp inspection filter
ip arp inspection log-buffer
logs
ip arp inspection validate
ip arp inspection vlan
ip arp inspection limit
ip arp inspection trust
show ip arp inspection
configuration
show ip arp inspection
interface
show ip arp inspection log
show ip arp inspection
statistics
show ip arp inspection vlan
This command enables ARP Inspection globally on the switch. Use the no form to
disable this function.
Syntax
[no] ip arp inspection
Default Setting
Disabled
Command Mode
Global Configuration
Command Usage
◆
When ARP Inspection is enabled globally with this command, it becomes active
only on those VLANs where it has been enabled with the
command.
Function
Enables ARP Inspection globally on the switch
Specifies an ARP ACL to apply to one or more VLANs
Sets the maximum number of entries saved in a log
message, and the rate at these messages are sent
Specifies additional validation of address components in
an ARP packet
Enables ARP Inspection for a specified VLAN or range of
VLANs
Sets a rate limit for the ARP packets received on a port
Sets a port as trusted, and thus exempted from ARP
Inspection
Displays the global configuration settings for ARP
Inspection
Shows the trust status and inspection rate limit for ports PE
Shows information about entries stored in the log,
including the associated VLAN, port, and address
components
Shows statistics about the number of ARP packets
processed, or dropped for various reasons
Shows configuration setting for VLANs, including ARP
Inspection status, the ARP ACL name, and if the DHCP
Snooping database is used after ACL validation is
completed
– 366 –
Mode
GC
GC
GC
GC
GC
IC
IC
PE
PE
PE
PE
ip arp inspection vlan