Siemens S223 User Manual page 168

UMN:CLI
168
You can configure the switch to perform additional checks on the destination MAC ad-
dress, the sender and target IP address and the source MAC address.
Command
ip arp inspection validate { src-
mac | dst-mac | ip }
ip arp inspection filter NAME
vlan VLAN
ip arp inspection trust port
PORTS
To remove the specific ARP Inspection configuration, use the following commands
Command
no ip arp inspection validate
{ src-mac | dst-mac | ip }
no ip arp inspection filter NAME
vlan VLAN
no ip arp inspection trust port
PORTS
To display checking and statistics, use the following command.
Command
show ip arp inspection [ vlan
VLAN]
show ip arp inspection statistics
[ vlan VLAN]
show ip arp inspection trust
[ port PORTS]
To clear ARP inspection mapping counter and statistics, use the following command.
Command
clear ip arp inspection statistics
[ vlan VLAN]
SURPASS hiD 6615 S223/S323 R1.5
Mode
Inspects specific check on incoming ARP packets.
src-mac: checks the source MAC address. Packets
with different MAC addresses are classified as invalid
are dropped.
dst-mac: checks the destination MAC address. Packets
with different MAC addresses are classified as invalid
are dropped.
Global
ip: checks the unexpected IP address.
Applies ARP ACL to the VLAN.
NAME: ARP ACL name. It is created with the arp ac-
cess-list NAME command.
Configures a connection between switches as trusted.
PORTS: trusted port number.
Mode
Global Removes specific ARP inspection configuration.
Mode
Enable
Global Displays the information of ARP inspection.
Bridge
Mode
Global
Clears ARP inspection statistics.
Bridge
User Manual
Description
Description
Description
Description
A50010-Y3-C150-2-7619