Dynamic Arp Inspection Commands; Show Ip Source Binding - NETGEAR ProSafe M7100-24X User Manual

0/1 ip-mac
0/1 ip-mac

show ip source binding

This command displays the IPSG bindings.
Format
show ip source binding [{static/dynamic}] [interface unit/slot/port]
[vlan id]
Mode
• Privileged EXEC
• User EXEC
Term Definition
MAC Address
The MAC address for the entry that is added.
IP Address
The IP address of the entry that is added.
Type
Entry type; statically configured from CLI or dynamically learned from DHCP Snooping.
VLAN
VLAN for the entry.
Interface
IP address of the interface in unit/slot/port format.
The following shows sample CLI display output for the command.
(switch) #show ip source binding
MAC Address IP Address
----------------- ---------------
00:00:00:00:00:08 1.2.3.4
00:00:00:00:00:09 1.2.3.4
00:00:00:00:00:0A 1.2.3.4

Dynamic ARP Inspection Commands

Dynamic ARP Inspection (DAI) is a security feature that rejects invalid and malicious ARP
packets. DAI prevents a class of man-in-the-middle attacks, where an unfriendly station
intercepts traffic for other stations by poisoning the ARP caches of its unsuspecting
neighbors. The miscreant sends ARP requests or responses mapping another station's IP
address to its own MAC address.
DAI relies on DHCP snooping. DHCP snooping listens to DHCP message exchanges and
builds a binding database of valid {MAC address, IP address, VLAN, and interface} tuples.
When DAI is enabled, the switch drops ARP packets whose sender MAC address and
sender IP address do not match an entry in the DHCP snooping bindings database. You can
optionally configure additional ARP packet validation.
ProSafe Managed Switch
210.1.1.3 00:02:B3:06:60:80
210.1.1.4 00:0F:FE:00:13:04
Type
-------------
dhcp-snooping
dhcp-snooping
dhcp-snooping
Switching Commands
139
10
10
Vlan Interface
----- -------------
2 1/0/1
3 1/0/1
4 1/0/1