Dell Networking N4000 Series Configuration Manual page 908

Command
acl-name
arp access-list
permit ip host
sender-mac
mac host
exit
ip arp inspection filter
acl-name vlan-range
vlan
[static]
interface
interface
ip arp inspection limit
pps
{none | rate
seconds
interval
ip arp inspection trust
CTRL + Z
show ip arp inspection
interface
interfaces [
908
Snooping and Inspecting Traffic
Purpose
Create an ARP ACL with the specified name (1–31
characters) and enter ARP Access-list Configuration mode
for the ACL.
sender-ip
Configure a rule for a valid IP address and MAC address
combination used in ARP packet validation.
sender-ip
•
sender-mac
•
the above sender-ip used by a host.
Exit to Global Config mode.
Configure the ARP ACL to be used for a single VLAN or a
range of VLANs to filter invalid ARP packets.
Use the static keyword to indicate that packets that do not
match a permit statement are dropped without consulting
the DHCP snooping bindings.
Enter interface configuration mode for the specified port
or LAG. The
and number, for example tengigabitethernet 1/0/3. For a
LAG, the interface type is port-channel.
You can also specify a range of ports with the interface
range command, for example, interface range
tengigabitethernet 1/0/8-12 configures interfaces 8, 9, 10,
11, and 12.
Configure the rate limit and burst interval values for an
[burst interface.Use the keyword none to specify that the
]} interface is not rate limited for Dynamic ARP Inspection.
• none — To set no rate limit.
pps
•
seconds
•
Specify that the interface as trusted for Dynamic ARP
Inspection.
Exit to Privileged EXEC mode.
View the Dynamic ARP Inspection configuration on all
] the DAI-enabled interfaces or for the specified interface.
— Valid IP address used by a host.
—Valid MAC address in combination with
interface
variable includes the interface type
— Packets per second (Range: 0–300).
— The number of seconds (Range: 1–15).