Ip Arp Inspection Vlan - Edge-Core ES3528MV2 Management Manual

| General Security Measures
C 25
HAPTER
ARP Inspection
ip arp inspection
vlan
This command enables ARP Inspection for a specified VLAN or range of
VLANs. Use the no form to disable this function.
S
YNTAX
[no] ip arp inspection vlan {vlan-id | vlan-range}
vlan-id - VLAN ID. (Range: 1-4094)
vlan-range - A consecutive range of VLANs indicated by the use a
hyphen, or a random group of VLANs with each entry separated by
a comma.
D S
EFAULT ETTING
Disabled on all VLANs
C M
OMMAND ODE
Global Configuration
C U
OMMAND SAGE
When ARP Inspection is enabled globally with the
◆
command, it becomes active only on those VLANs where it has been
enabled with this command.
When ARP Inspection is enabled globally and enabled on selected
◆
VLANs, all ARP request and reply packets on those VLANs are
redirected to the CPU and their switching is handled by the ARP
Inspection engine.
When ARP Inspection is disabled globally, it becomes inactive for all
◆
VLANs, including those where ARP Inspection is enabled.
When ARP Inspection is disabled, all ARP request and reply packets
◆
bypass the ARP Inspection engine and their manner of switching
matches that of all other packets.
Disabling and then re-enabling global ARP Inspection will not affect the
◆
ARP Inspection configuration for any VLANs.
When ARP Inspection is disabled globally, it is still possible to configure
◆
ARP Inspection for individual VLANs. These configuration changes will
only become active after ARP Inspection is globally enabled again.
E
XAMPLE
Console(config)#ip arp inspection vlan 1,2
Console(config)#
– 936 –
ip arp inspection