1117
Examples
# Display the VLANs enabled with ARP attack detection.
<Sysname> display arp detection
ARP detection is enabled in the following VLANs:
1-2, 4-5
Related commands
arp detection enable
display arp detection statistics
Use display arp detection statistics to display ARP attack detection statistics.
Syntax
display arp detection statistics [ interface interface-type interface-number ]
Views
Any view
Predefined user roles
network-admin
network-operator
Parameters
interface interface-type interface-number: Displays the ARP attack detection statistics of an
interface.
Usage guidelines
This command displays numbers of packets discarded by user validity check and ARP packet
validity check. If you do not specify an interface, the command displays statistics for all interfaces.
Examples
# Display the ARP attack detection statistics for all interfaces.
<Sysname> display arp detection statistics
State: U-Untrusted T-Trusted
ARP packets dropped by ARP inspect checking:
Interface(State) IP Src-MAC Dst-MAC Inspect
GE1/0/1(U) 40 0 0 78
GE1/0/2(U) 0 0 0 0
GE1/0/3(T) 0 0 0 0
GE1/0/4(U) 0 0 30 0
Table 174 Command output
State
State of an interface:
• U—ARP untrusted interface.
• T—ARP trusted interface.
Interface(State)
Inbound interface of ARP packets. State specifies the port state,
trusted
or
untrusted
.
IP Number of ARP packets discarded due to invalid sender and target IP addresses.
Src-MAC Number of ARP packets discarded due to invalid source MAC address.