DGS-6604 ip arp inspection vlan
CLI Reference Guide
240
ip arp inspection vlan
Use the command to enable specific VLANs for dynamic ARP inspection. Use
the no form of the command disable dynamic ARP inspection for VLAN.
ip arp inspection vlan VLAN-ID [, | -]
no ip arp inspection vlan VLAN-ID [, | -]
Default ARP inspection is disabled on all VLANs.
Command Mode Global configuration mode
Usage Guideline When a VLAN is enabled for ARP inspection, the ARP packets, including both
ARP request and response packet belonging to the VLAN arriving at the un-
trusted interface will be validated. If the IP to MAC address binding pair the
source MAC address and the source IP address in the Ethernet header is not
permitted by the ARP ACL or the DHCP snooping binding database, the ARP
packet will be dropped.
Example This example shows how to enable ARP inspection on VLAN2:
Syntax Description
vlan VLAN-ID Specify the VLAN to enable or disable the ARP inspection function.
, (Optional) Specify a series of VLANs, or separate a range of VLANs from a
previous range. Enter a space before and after the comma.
- (Optional) Specify a range of VLANs. Enter a space before and after the hyphen.
Switch# configure terminal
Switch(config)# ip arp inspection vlan 2
Switch(config)#
To Next Page
Loading...
