Edge-Core ECS3510-28T Management Manual page 932

| General Security Measures
C 24
HAPTER
ARP Inspection
show ip arp
inspection log
show ip
arp inspection
statistics
show ip arp
inspection vlan
This command shows information about entries stored in the log, including
the associated VLAN, port, and address components.
C M
OMMAND ODE
Privileged Exec
E
XAMPLE
Console#show ip arp inspection log
Total log entries number is 1
Num VLAN Port Src IP Address
--- ---- ---- --------------
1 1 11 192.168.2.2
Console#
This command shows statistics about the number of ARP packets
processed, or dropped for various reasons.
C M
OMMAND ODE
Privileged Exec
E
XAMPLE
Console#show ip arp inspection statistics
ARP packets received before rate limit
ARP packets dropped due to rate limt
Total ARP packets processed by ARP Inspection
ARP packets dropped by additional validation (source MAC address)
ARP packets dropped by additional validation (destination MAC address): 0
ARP packets dropped by additional validation (IP address)
ARP packets dropped by ARP ACLs
ARP packets dropped by DHCP snooping
Console#
This command shows the configuration settings for VLANs, including ARP
Inspection status, the ARP ACL name, and if the DHCP Snooping database
is used after ARP ACL validation is completed.
S
YNTAX
show ip arp inspection vlan [vlan-id | vlan-range]
vlan-id - VLAN ID. (Range: 1-4094)
vlan-range - A consecutive range of VLANs indicated by the use a
hyphen, or a random group of VLANs with each entry separated by
a comma.
C M
OMMAND ODE
Privileged Exec
– 932 –
Dst IP Address Src MAC Address
-------------- ---------------
192.168.2.1 00-04-E2-A0-E2-7C FF-FF-FF-FF-FF-FF
Dst MAC Address
--------------
: 150
: 5
: 150
: 0
: 0
: 0
: 0