Using The Cli - TP-Link T1600G-18TS Configuration Manual

Configuring Network Security
In the Illegal ARP Packet section, you can view the number of illegal ARP packets on each
port.
Trusted Port
Illegal ARP
Packet
4.2

Using the CLI

4.2.1 Configuring ARP Detection
The ARP Detection feature allows the switch to detect the ARP packets basing on the
binding entries in the IP-MAC Binding Table and filter the illegal ARP packets. Before
configuring ARP Detection, complete IP-MAC Binding configuration. For details, refer to
MAC Binding
Follow these steps to configure ARP Detection:
Step 1
Step 2
Step 3
Step 4
Step 5
Step 6
Step 7
The following example shows how to globally enable ARP Detection and configure port
1/0/1 as a trusted port.
Switch#configure
Indicates whether the port is an ARP trusted port or not.
Displays the number of the received illegal ARP packets.
Configurations.
configure
Enter global configuration mode.
ip arp inspection
Globally enable the ARP Detection feature.
interface { fastEthernet port | range fastEthernet port-list | gigabitEthernet port | range
gigabitEthernet port-list }
Enter interface configuration mode.
ip arp inspection trust
Configure the port as a trusted port, on which the ARP Detection function will not take
effect. The specific ports, such as up-linked ports and routing ports are suggested to be set
as trusted ports.
show ip arp inspection
Verify the ARP Inspection configuration.
end
Return to privileged EXEC mode.
copy running-config startup-config
Save the settings in the configuration file.
ARP Inspection Configurations
Configuration Guide
IP-
563