Lenovo RackSwitch G8264CS Application Manual page 361

© Copyright Lenovo 2017
The DHCP Snooping binding tables will be similar to the following:
Mac Address IP Address
Interface
-------------------------------------------------------------------------
-----
00:00:00:00:00:01 Host1_IP
00:00:00:00:00:02
Total number of bindings: 2
SwitchB#show ip dhcp snooping binding
Mac Address IP Address
Interface
-------------------------------------------------------------------------
-----
00:00:00:00:00:02
Total number of bindings: 1
SwitchA# show ip dhcp snooping binding
SwitchA# show ip arp inspection vlan
Vlan
----
2
SwitchA# show ip arp inspection interfaces
Interface
---------
...
SwitchA# show ip arp inspection statistics
Vlan
----
2
When Host 1 tries to send an ARP with an IP address of 1.1.1.3 that is not present in
the DHCP Binding table, the packet is dropped and an error message similar to the
following is logged:
"Dec 16 21:00:10 192.168.49.50 NOTICE ARP-Inspection: Invalid
ARP Request on port 3, VLAN 2
([00:02:00:02:00:02/1.1.1.3/00:00:00:00:00:00/1.1.1.4])"
Lease(seconds) Type
1000
Host2_IP 2000
Lease(seconds) Type
Host2_IP 2000
Output of show commands:
Configuration
-------------
Enabled
Trust State
-----------
ForwardedDropped
----------------
100
VLAN
Dynamic 2
Dynamic
VLAN
Dynamic
1Trusted
2Trusted
3Untrusted
4Untrusted
200
Chapter 21: Dynamic ARP Inspection
3
2 2
2 3
361