Ip Arp Inspection - Edge-Core ECS2100-10T Reference Manual

Chapter 9
| General Security Measures
ARP Inspection

ip arp inspection

Table 59: ARP Inspection Commands
Command
show ip arp inspection
configuration
show ip arp inspection
interface
show ip arp inspection log
show ip arp inspection
statistics
show ip arp inspection vlan
This command enables ARP Inspection globally on the switch. Use the no form to
disable this function.
Syntax
[no] ip arp inspection
Default Setting
Disabled
Command Mode
Global Configuration
Command Usage
◆
When ARP Inspection is enabled globally with this command, it becomes active
only on those VLANs where it has been enabled with the
command.
◆
When ARP Inspection is enabled globally and enabled on selected VLANs, all
ARP request and reply packets on those VLANs are redirected to the CPU and
their switching is handled by the ARP Inspection engine.
◆
When ARP Inspection is disabled globally, it becomes inactive for all VLANs,
including those where ARP Inspection is enabled.
◆
When ARP Inspection is disabled, all ARP request and reply packets bypass the
ARP Inspection engine and their manner of switching matches that of all other
packets.
◆
Disabling and then re-enabling global ARP Inspection will not affect the ARP
Inspection configuration for any VLANs.
(Continued)
Function
Displays the global configuration settings for ARP
Inspection
Shows the trust status and inspection rate limit for ports PE
Shows information about entries stored in the log,
including the associated VLAN, port, and address
components
Shows statistics about the number of ARP packets
processed, or dropped for various reasons
Shows configuration setting for VLANs, including ARP
Inspection status, the ARP ACL name, and if the DHCP
Snooping database is used after ACL validation is
completed
– 306 –
Mode
PE
PE
PE
PE
ip arp inspection vlan