Command Line Interface Reference Guide
src-mac
■
header does not match the sender MAC address in the body of the packet.
■ [no] arp-protect
vlan-list
■
COMMAND DETAILS
dest-mac (p. 66)
ip (p. 66)
src-mac (p. 66)
dest-mac
■ [no] arp-protect validate dest-mac
Drop any ARP response packet in which the destination MAC address in the
ethernet header does not match the target MAC address in the body of the
packet.
ip
■ [no] arp-protect validate ip
Drop any ARP request with an invalid sender IP address. Drop any ARP
response with an invalid target IP address. Invalid IP addresses include
0.0.0.0, 255.255.255.255, all IP multicast addresses, and all class E
IP addresses.
src-mac
■ [no] arp-protect validate src-mac
Drop any ARP request or response packet in which the source MAC in the
ethernet header does not match the sender MAC address in the body of
the packet.
trust
■ [no] arp-protect trust [ETHERNET] PORT-LIST
Configure port(s) as trusted or untrusted.
validate
■ [no] arp-protect validate
Configure additional ARP Protection validation checks.
Next Available Options:
src-mac
■
header does not match the sender MAC address in the body of the packet.
dest-mac
■
header does not match the target MAC address in the body of the packet.
ip
-- Drop any ARP request with an invalid sender IP address. Drop any ARP response with an
■
invalid target IP address. Invalid IP addresses include 0.0.0.0, 255.255.255.255, all IP multicast
addresses, and all class E IP addresses.
© 2009 Hewlett-Packard Development Company, L.P.
-- Drop any ARP request or response packet in which the source MAC in the ethernet
vlan
-- Enable/disable Dynamic ARP Protection on a VLAN(s).
-- (VLAN-ID-RANGE)
(p. 67)
trust (p. 66)
validate (p. 66)
vlan (p. 67)
-- Drop any ARP request or response packet in which the source MAC in the ethernet
-- Drop any ARP response packet in which the destination MAC address in the ethernet
vlan-list (p. 67)
(p. 66)
arp-protect
(p. 66)
(p. 67)
(p. 66)
(p. 66)
66