Edge-Core ECS4660-28F Management Manual page 413

C
ONFIGURING
VLAN S
ETTINGS
ARP I
FOR NSPECTION
Allow Zeros – Allows sender IP address to be 0.0.0.0.
■
Src-MAC – Validates the source MAC address in the Ethernet
■
header against the sender MAC address in the ARP body. This check
is performed on both ARP requests and responses.
Log Message Number – The maximum number of entries saved in a
◆
log message. (Range: 0-256; Default: 5)
◆ Log Interval – The interval at which log messages are sent.
(Range: 0-86400 seconds; Default: 1 second)
W I
EB NTERFACE
To configure global settings for ARP Inspection:
Click Security, ARP Inspection.
1.
Select Configure General from the Step list.
2.
Enable ARP inspection globally, enable any of the address validation
3.
options, and adjust any of the logging parameters if required.
Click Apply.
4.
Figure 212: Configuring Global Settings for ARP Inspection
Use the Security > ARP Inspection (Configure VLAN) page to enable ARP
inspection for any VLAN and to specify the ARP ACL to use.
CLI R
EFERENCES
"ARP Inspection" on page 1145
◆
C U
OMMAND SAGE
ARP Inspection VLAN Filters (ACLs)
By default, no ARP Inspection ACLs are configured and the feature is
◆
disabled.
– 413 –
| Security Measures
C 13
HAPTER
ARP Inspection