Lantronix SISPM1040-xxxx-L3 Web User Guide
33856 Rev. A https://www.lantronix.com/ 226
Security > ARP Inspection > Configuration
This page provides ARP Inspection related configuration.
ARP Inspection is a security feature. Several types of attacks can be launched against a host or devices
connected to Layer 2 networks by "poisoning" the ARP caches. This feature is used to block such attacks.
When enabled, only valid ARP requests and responses can go through the switch.
Mode: Set to on to enable ARP Inspection globally or set to off to disable ARP Inspection globally.
Port Mode Configuration
Mode: Specify ARP Inspection is enabled on which ports. Only when both Global Mode and Port Mode on a given
port are enabled, ARP Inspection is enabled on this given port. Possible modes are:
Enabled: Enable ARP Inspection operation.
Disabled: Disable ARP Inspection operation.
Check VLAN: To inspect the VLAN configuration, you must enable the setting of "Check VLAN". The default
setting of "Check VLAN" is disabled. When the setting of "Check VLAN" is disabled, the log type of ARP
Inspection will refer to the port setting. And the setting of "Check VLAN" is enabled, the log type of ARP
Inspection will refer to the VLAN setting. Possible setting of "Check VLAN" are:
Enabled: Enable check VLAN operation.
Disabled: Disable check VLAN operation.
Log Type: Only when the Global Mode and Port Mode on a given port are enabled, and the setting of "Check
VLAN" is disabled, the log type of ARP Inspection will refer to the port setting. The four possible Log Types are:
None: Log nothing.
Deny: Log denied entries.
Permit: Log permitted entries.
All: Log all entries.