C
HAPTER
13
| Security Measures
ARP Inspection
– 378 –
Figure 207: Configuring Interface Settings for ARP Inspection
DISPLAYING
ARP INSPECTION
STATISTICS
Use the Security > ARP Inspection (Show Information - Show Statistics)
page to display statistics about the number of ARP packets processed, or
dropped for various reasons.
CLI REFERENCES
â—† "show ip arp inspection statistics" on page 939
PARAMETERS
These parameters are displayed:
Table 21: ARP Inspection Statistics
Parameter Description
Received ARP packets before
ARP inspection rate limit
Count of ARP packets received but not exceeding the ARP
Inspection rate limit.
Dropped ARP packets in the
process of ARP inspection rate
limit
Count of ARP packets exceeding (and dropped by) ARP rate
limiting.
ARP packets dropped by
additional validation (IP)
Count of ARP packets that failed the IP address test.
ARP packets dropped by
additional validation
(Dst-MAC)
Count of packets that failed the destination MAC address test.
Total ARP packets processed
by ARP inspection
Count of all ARP packets processed by the ARP Inspection
engine.
ARP packets dropped by
additional validation
(Src-MAC)
Count of packets that failed the source MAC address test.
ARP packets dropped by ARP
ACLs
Count of ARP packets that failed validation against ARP ACL
rules.
ARP packets dropped by
DHCP snooping
Count of packets that failed validation against the DHCP
Snooping Binding database.