Dynamic Arp Inspection; Introduction - Raisecom ISCOM2600G-HI (A) Series Configuration Manual

Raisecom
ISCOM2600G-HI (A) Series Configuration Guide
Raisecom(config-gigaethernet1/1/3)#switchport port-security mac-address
sticky 0000.0000.0002 vlan 1
Raisecom(config-gigaethernet1/1/3)#switchport port-security mac-address
sticky
Raisecom(config-gigaethernet1/1/3)#switchport port-security violation
shutdown
Checking results
Use the show port-security command to show configurations of port security MAC.
Raisecom#show port-security
Port security aging time:10 (mins)
Port security recovery time:Disable (s)
port
vio-action Dynamic-Trap Aging-Type
-------------------------------------------------------------------------
-----------------------------------------
gigaethernet1/1/1
protect
gigaethernet1/1/2
restrict
gigaethernet1/1/3
shutdown
gigaethernet1/1/4
protect
gigaethernet1/1/5
...
Use the show port-security mac-address command to show configurations and learning of
secure MAC addresses.
Raisecom#show port-security mac-address
VLAN Security-MAC-Address Flag
--------------------------------------------------------------------------
1
1

10.3 Dynamic ARP inspection

10.3.1 Introduction

Dynamic ARP inspection is used for ARP protection of unsecure interface and prevents from
responding ARP packets which do not meet the requirements, thus preventing ARP spoofing
attack on the network.
status
Enable Absolute
Disable
Disable
Disable Absolute
0000.0000.0001
0000.0000.0002
Raisecom Proprietary and Confidential
Copyright © Raisecom Technology Co., Ltd.
Max-Num
Enable 3
Enable 2
Absolute
Enable 1
Absolute
Disable 1024
Disable 1024
Security-static
sticky
Cur-Num His-MaxNum
1 1
0 0
1 1
0 0
0 0
Port
gigaethernet1/1/1
gigaethernet1/1/3
10 Security
vio-Count
0
0
0
0
0
Age(min)
--
--
410