â– src-mac -- Drop any ARP request or response packet in which the source MAC in the ethernet
header does not match the sender MAC address in the body of the packet. (p. 66)
â– [no] arp-protect vlan -- Enable/disable Dynamic ARP Protection on a VLAN(s). (p. 67)
â– vlan-list -- (VLAN-ID-RANGE) (p. 67)
COMMAND DETAILS
vlan-list (p. 67)trust (p. 66)dest-mac (p. 66)
validate (p. 66)ip (p. 66)
vlan (p. 67)src-mac (p. 66)
dest-mac
â– [no] arp-protect validate dest-mac
Drop any ARP response packet in which the destination MAC address in the
ethernet header does not match the target MAC address in the body of the
packet.
ip
â– [no] arp-protect validate ip
Drop any ARP request with an invalid sender IP address. Drop any ARP
response with an invalid target IP address. Invalid IP addresses include
0.0.0.0, 255.255.255.255, all IP multicast addresses, and all class E
IP addresses.
src-mac
â– [no] arp-protect validate src-mac
Drop any ARP request or response packet in which the source MAC in the
ethernet header does not match the sender MAC address in the body of
the packet.
trust
â– [no] arp-protect trust [ETHERNET] PORT-LIST
Conîš¿gure port(s) as trusted or untrusted.
validate
â– [no] arp-protect validate
Conîš¿gure additional ARP Protection validation checks.
Next Available Options:
â– src-mac -- Drop any ARP request or response packet in which the source MAC in the ethernet
header does not match the sender MAC address in the body of the packet. (p. 66)
â– dest-mac -- Drop any ARP response packet in which the destination MAC address in the ethernet
header does not match the target MAC address in the body of the packet. (p. 66)
â– ip -- Drop any ARP request with an invalid sender IP address. Drop any ARP response with an
invalid target IP address. Invalid IP addresses include 0.0.0.0, 255.255.255.255, all IP multicast
addresses, and all class E IP addresses. (p. 66)
66© 2009 Hewlett-Packard Development Company, L.P.
arp-protectCommand Line Interface Reference Guide
To Next Page
Loading...
Need help?
General