D-Link DXS-3600 Series Cli Reference Manual page 463

DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide
Parameters
vlan VLAN-ID
,
-
Default
By default, ARP inspection is disabled on all VLANs.
Command Mode
Global Configuration Mode.
Command Default Level
Level: 12.
Usage Guideline
When a VLAN is enabled for ARP inspection, the ARP packets, including both the ARP request and
response packet belonging to the VLAN arriving at the untrusted interface will be validated. If the IP-to-
MAC address binding pair of the source MAC address and the source IP address is not permitted by the
ARP ACL or the DHCP snooping binding database, the ARP packet will be dropped. In addition to the
address binding check, the additional check defined by the IP ARP inspection validate command will also
be checked.
Example
This example shows how to enable ARP inspection on VLAN 2.
Switch# configure terminal
Switch(config)# ip arp inspection vlan 2
Switch(config)#
35-10 ip arp inspection vlan logging
This command is used to control the type of packets that are logged. Use the no form of the command to
revert the setting to default.
ip arp inspection vlan VLAN-ID [, | -] logging {acl-match {permit | all | none} | dhcp-bindings
{permit | all | none}}
no ip arp inspection vlan VLAN-ID [, | -] logging {acl-match | dhcp-bindings}
Parameters
vlan VLAN-ID
,
-
Specifies the VLAN to enable or disable the ARP inspection function.
(Optional) Specifies a series of interfaces, or separate a range of
interfaces from a previous range. No space is allowed before and after
the comma.
(Optional) Specifies a range of interfaces. No space is allowed before
and after the hyphen.
Specifies the VLAN to enable or disable the logging control function.
(Optional) Specifies a series of interfaces, or separate a range of
interfaces from a previous range. No space is allowed before and after
the comma.
(Optional) Specifies a range of interfaces. No space is allowed before
and after the hyphen.
458