Table of Contents
Advertisement
by the
(2) Basic inspection of dynamic ARP inspection
In the basic inspection, the Switch checks whether the information in the ARP packets
received on untrusted ports matches the entries in the binding database.
The following figure shows the basic inspection of dynamic ARP inspection.
Figure 23-8 Overview of the basic inspection of dynamic ARP inspection
Table 23-3 Fields of an ARP packet subject to basic inspection
Field of an ARP packet
Ethernet header
ARP header
Legend:
Y: Subject to inspection
--: Not subject to inspection
(3) Optional inspection of dynamic ARP inspection
The dynamic ARP inspection functionality checks the matching with the binding database.
As an optional functionality, it also supports inspection of the matching of data in ARP
packets.
ip arp inspection trust
Destinatio
MAC
n
Source
MAC
Sender
MAC
IP
Target
MAC
IP
configuration command)
Reque
Reply
Remarks
st
--
--
--
--
--
--
Y
Y
Compared with the entries in the
binding database.
Y
Y
Compared with the entries in the
binding database.
--
--
--
--
--
--
23 DHCP Snooping
413
Advertisement
Table of Contents
