CANOGA PERKINS CanogaOS Configuration Guide User Manual

Page 305

Advertising
background image

CanogaOS Configuration Guide

Proprietary & Confidential Canoga Perkins Metro Ethernet Switches

Page 305 of 350

DUT(config)#interface eth-0-1

Enter the Interface Configure mode and begin to
configure port eth-0-1.

DUT(config-if)#ip arp inspection trust

Configure the port to trust status.( usually configure
the connection between switches as trusted)

DUT(config-if)#exit

Exit the Interface Configure mode.

DUT(config)#ip arp inspection vlan 2

Enable ARP Inspection on VLAN 2.

DUT(config)#ip arp inspection validate src-mac ip
dst-mac

Validate source MAC address, IP and destination
MAC address in ARP packet.

36.1.4 Validation Commands

1. Check the configuration of ARP Inspection on switch A

DUT#show ip arp inspection

Source Mac Validation : Enabled

Destination Mac Validation : Enabled

IP Address Validation : Enabled

Vlan Configuration ACL Match Static ACL

=================================================================

2 enabled

Vlan ACL Logging DHCP Logging

=================================================================

2 deny deny

Vlan Forwarded Dropped DHCP Drops ACL Drops

=================================================================

2 0 0 0 0

Vlan DHCP Permits ACL Permits Source MAC Failures

=================================================================

2 0 0 0

Vlan Dest MAC Failures IP Validation Failures Invalid Protocol Data

=================================================================

2 0 0 0

Show the log information of ARP Inspection on switch A

DUT#show ip arp inspection log

Advertising