D-Link DGS-1510 Series - Page 229

DGS-1510 Series Gigabit Ethernet SmartPro Switch CLI Reference Guide
226
Global Configuration Mode.
Command Default Level
Level: 12.
Usage Guideline
When a VLAN is enabled for ARP inspection, the ARP packets, including both the ARP request and
response packet belonging to the VLAN arriving at the untrusted interface will be validated. If the IP-
to-MAC address binding pair of the source MAC address and the source IP address is not permitted
by the ARP ACL or the DHCP snooping binding database, the ARP packet will be dropped. In
addition to the address binding check, the additional check defined by the IP ARP inspection validate
command will also be checked.
Example
This example shows how to enable ARP inspection on VLAN 2.
Switch# configure terminal
Switch(config)# ip arp inspection vlan 2
Switch(config)#
26-10 ip arp inspection vlan logging
This command is used to control the type of packets that are logged. Use the no form of this
command to revert to the default settings.
ip arp inspection vlan VLAN-ID [, | -] logging {acl-match {permit | all | none} | dhcp-bindings
{permit | all | none}}
no ip arp inspection vlan VLAN-ID [, | -] logging {acl-match | dhcp-bindings}
Parameters
vlan VLAN-ID
Specifies the VLAN to enable or disable the logging control function.
,
(Optional) Specifies a series of interfaces, or separate a range of
interfaces from a previous range. No space is allowed before and
after the comma.
-
(Optional) Specifies a range of interfaces. No space is allowed
before and after the hyphen.
acl-match
Specifies the logging criteria for packets that are dropped or
permitted based on ACL matches.
acl-match permit
Specifies logging when permitted by the configured ACL.
acl-match all
Specifies logging when permitted or denied by the configured ACL.
acl-match none
Specifies that ACL-matched packets are not logged.
dhcp-bindings
Specifies the logging criteria for packets dropped or permitted
based on matches against the DHCP bindings.
dhcp-bindings permit
Specifies logging when permitted by DHCP bindings.
dhcp-bindings all
Specifies logging when permitted or denied by DHCP bindings.
dhcp-bindings none
Specifies to prevent the logging of all packets permitted or denied
by DHCP bindings.
Default
All denied or dropped packets are logged.
Command Mode