Chapter 14 ARP Inspection Commands
ARP (Address Resolution Protocol) Detect function is to protect the switch from the ARP
cheating, such as the Network Gateway Spoofing and Man-In-The-Middle Attack, etc.
14.1 ip arp inspection(global)
Description
The ip arp inspection command is used to enable the ARP Detection
function globally. To disable the ARP Detection function, please use no ip arp
detection command.
Syntax
ip arp inspection
no ip arp inspection
Command Mode
Global Configuration Mode
Privilege Requirement
Only Admin, Operator and Power User level users have access to these
commands.
Example
Enable the ARP Detection function globally:
T2500G-10TS(config)#ip arp inspection
14.2 ip arp inspection trust
Description
The ip arp inspection trust command is used to configure the port for which
the ARP Detect function is unnecessary as the Trusted Port. To clear the
Trusted Port list, please use no ip arp detection trust command .The specific
ports, such as up-linked port and routing port and LAG port, should be set as
Trusted Port. To ensure the normal communication of the switch, please
configure the ARP Trusted Port before enabling the ARP Detect function.
105
To Next Page
Loading...
