424 Configuring Switching Information
•
Logging Invalid Packets
— Select whether Dynamic ARP Inspection logging is Enabled or Disabled
on this VLAN. The default is Disable.
•
ARP ACL Name
— The name of the ARP Access List. A VLAN can be configured to use this ARP
ACL containing rules as the filter for ARP packet validation. The name can contain 1-31 alphanumeric
characters.
•
Static Flag
— Use this flag to determine whether the ARP packet needs validation using the DHCP
snooping database, in case the ARP ACL rules do not match. If Enabled, then the ARP Packet will be
validated by the ARP ACL Rules only. If Disabled, then the ARP Packet needs further validation by
using the DHCP Snooping entries. The default is Disable.
Configuring Dynamic ARP Inspection VLANs With CLI Commands
For information about the CLI commands that perform this function, refer to the following chapter in
the
CLI Reference Guide
:
• Dynamic ARP Inspection Commands
The following table summarizes the equivalent CLI commands for this feature.
DAI ACL Configuration
Use the DAI ARP ACL Configuration page to add or remove DAI ARP ACLs.
To display the DAI ARP ACL Configuration page, click Switching
→
Dynamic ARP Inspection
→
ACL
Configuration in the navigation tree.
Table 7-60. Dynamic ARP Inspection VLAN Commands
CLI Command Description
ip arp inspection filter Configures the ARP ACL to be used for a single VLAN or a range of
VLANs to filter invalid ARP packets.
ip arp inspection vlan Enables Dynamic ARP Inspection on a single VLAN or a range of
VLANs.
show ip arp inspection vlan Displays the Dynamic ARP Inspection configuration on all the VLANs
in the given VLAN range.
To Next Page
Loading...
Need help?
General
