Ip Arp Inspection Vlan; Ip Arp Inspection Trust - Alcatel OmniStack LS 6248 User Manual

4
Command Line Interface
User Guidelines
There are no user guidelines for this command.
Example
The following example globally enables the ARP inspection.
Console # (config)# ip arp inspection
Console # (config)# 01-Jan-2000 23:07:53 %ARPINSP-I-PCKTLOG: ARP packet
dropped from port g3 with VLAN tag 1 and reason: packet verification failed
SRC MAC 00:00:5e:00:01:07 SRC IP 10.6.22.193 DST MAC 00:00:00:00:00:00 DST
IP 10.6.22.195

ip arp inspection vlan

The ip arp inspection vlan Global Configuration mode command enables ARP
inspection based on DHCP snooping database on a VLAN. To disable ARP
inspection on a VLAN, use the no form of this command.
Syntax
ip arp inspection vlan vlan-id
no ip arp inspection vlan vlan-id
Parameters
• vlan-id — Specifies the VLAN ID.
Default Configuration
The default configuration is set to disabled.
Command Mode
Global Configuration mode
User Guidelines
This command enables ARP inspection on a VLAN based on the DHCP
snooping database.The ip arp inspection list assign Global Configuration
mode command enables static ARP inspection.
Example
The following example enables ARP inspection on VLAN ID 1.
Console # (config)# ip arp inspection vlan 1
Console # (config)#

ip arp inspection trust

The ip arp inspection trust Interface Configuration (Ethernet, Port-channel) mode
command configures an interface trust state that determines if incoming Address
Resolution Protocol (ARP) packets are inspected. To return to the default
configuration, use the no form of this command.
646