Ip arp inspection trust – Microsens MS453490M Management Guide User Manual

Page 679

Advertising
background image

C

HAPTER

25

| General Security Measures

ARP Inspection

– 679 –

C

OMMAND

M

ODE

Interface Configuration (Port)

C

OMMAND

U

SAGE

This command only applies to untrusted ports.

When the rate of incoming ARP packets exceeds the configured limit,

the switch drops all ARP packets in excess of the limit.

E

XAMPLE

Console(config)#interface ethernet 1/1

Console(config-if)#ip arp inspection limit 150

Console(config-if)#

ip arp inspection

trust

This command sets a port as trusted, and thus exempted from ARP

Inspection. Use the no form to restore the default setting.

S

YNTAX

[no] ip arp inspection trust

D

EFAULT

S

ETTING

Untrusted

C

OMMAND

M

ODE

Interface Configuration (Port)

C

OMMAND

U

SAGE

Packets arriving on untrusted ports are subject to any configured ARP

Inspection and additional validation checks. Packets arriving on trusted

ports bypass all of these checks, and are forwarded according to normal

switching rules.

E

XAMPLE

Console(config)#interface ethernet 1/1

Console(config-if)#ip arp inspection trust

Console(config-if)#

Advertising