Ip Arp Inspection - Edge-Core ECS4810-12M Layer 2 Management Manual

Hide thumbs Also See for ECS4810-12M Layer 2:

Table of Contents

| General Security Measures

ARP Inspection

ip arp inspection

Table 89: ARP Inspection Commands (Continued)

show ip arp inspection

show ip arp inspection vlan

This command enables ARP Inspection globally on the switch. Use the no

form to disable this function.

[no] ip arp inspection

Global Configuration

When ARP Inspection is enabled globally with this command, it

becomes active only on those VLANs where it has been enabled with

ip arp inspection vlan

When ARP Inspection is enabled globally and enabled on selected

VLANs, all ARP request and reply packets on those VLANs are

redirected to the CPU and their switching is handled by the ARP

Inspection engine.

When ARP Inspection is disabled globally, it becomes inactive for all

VLANs, including those where ARP Inspection is enabled.

When ARP Inspection is disabled, all ARP request and reply packets

bypass the ARP Inspection engine and their manner of switching

matches that of all other packets.

Disabling and then re-enabling global ARP Inspection will not affect the

ARP Inspection configuration for any VLANs.

When ARP Inspection is disabled globally, it is still possible to configure

ARP Inspection for individual VLANs. These configuration changes will

only become active after ARP Inspection is globally enabled again.

Console(config)#ip arp inspection

Console(config)#

Shows statistics about the number of ARP packets

processed, or dropped for various reasons

Shows configuration setting for VLANs, including ARP

Inspection status, the ARP ACL name, and if the

DHCP Snooping database is used after ACL validation

is completed