Ip Arp Inspection Validate - D-Link DGS-6600-48T Cli Reference Manual

DGS-6604

ip arp inspection validate

ip arp inspection validate {[src-mac] [dst-mac] [ip]}
no ip arp inspection validate [src-mac] [dst-mac] [ip]
Syntax Description
src-mac
dst-mac
ip
Default
Command Mode
Usage Guideline
Example
Switch# configure terminal
Switch(config)# ip arp inspection validate src-mac
Switch(config)#
CLI Reference Guide
Use the command to specify the additional checks to be performed during ARP
inspection check. Use the no form of the command to remove specific additional
check.
(Optional) Specify to check, for both ARP request response packets, the
consistency of the source MAC address in the Ethernet header against the
sender MAC address in the ARP payload.
(Optional) Specify to check, for ARP response packets, the consistency of the
destination MAC address in the Ethernet header against the target MAC address
in the ARP payload.
(Optional) Checks the ARP body for invalid and unexpected IP addresses.
Specify to check the validity of IP address in the ARP payload. Sender IP in both
ARP request and response and target IP in ARP response are validated.
Packets with addresses including 0.0.0.0,
255.255.255.255, and all IP multicast addresses are dropped. Sender IP
addresses are checked in all ARP
requests and responses, and target IP addresses are checked only in ARP
responses.
Disabled
Global configuration mode
Use the command to specify the additional checks to be performed during
dynamic ARP inspection check. The specified check will be performed on
packets arriving at the untrusted interface and belong to the VLANs that are
enabled for ip arp inspection.
Use the no form of the command with specific option to disabled specific type of
check.
This example shows how to enable source MAC validation:
This example shows how to disable source MAC validation:
ip arp inspection validate
228