Cisco IE-5000 User Manual

413
Configuring Dynamic ARP Inspection
How to Configure Dynamic ARP Inspection
Performing Validation Checks
Command Purpose
1. configure terminal Enters global configuration mode.
2. ip arp inspection validate
{[src-mac] [dst-mac] [ip]}
Performs a specific check on incoming ARP packets. By default, no checks are
performed.
 src-mac—Checks the source MAC address in the Ethernet header against the
sender MAC address in the ARP body. This check is performed on both ARP
requests and responses. When enabled, packets with different MAC addresses
are classified as invalid and are dropped.
 dst-mac—Checks the destination MAC address in the Ethernet header against
the target MAC address in ARP body. This check is performed for ARP
responses. When enabled, packets with different MAC addresses are classified
as invalid and are dropped.
 ip—Checks the ARP body for invalid and unexpected IP addresses. Addresses
include 0.0.0.0, 255.255.255.255, and all IP multicast addresses. Sender IP
addresses are checked in all ARP requests and responses, and target IP
addresses are checked only in ARP responses.
You must specify at least one of the keywords. Each command overrides the
configuration of the previous command; that is, if a command enables src and dst
mac validations, and a second command enables IP validation only, the src and dst
mac validations are disabled as a result of the second command.
3. exit Returns to privileged EXEC mode.

Cisco IE-5000 Specifications

General

Model	IE-5000
Category	Industrial Ethernet Switch
Switching Capacity	128 Gbps
Forwarding Rate	95.2 Mpps
MAC Address Table Size	16, 000 entries
Ports	16 or 24 10/100/1000 ports
Uplink Ports	4 SFP ports
Operating Temperature	-40°C to 70°C
Power Supply	Dual redundant power supplies
Mounting	DIN rail
Management	Web GUI, CLI, SNMP
Input Voltage	24 VDC or 110/220 VAC
Layer	Layer 2/3
Jumbo Frame Support	Up to 9216 bytes