Ip arp inspection – Microsens MS453490M Management Guide User Manual
Page 674
C
HAPTER
25
| General Security Measures
ARP Inspection
– 674 –
ip arp inspection
This command enables ARP Inspection globally on the switch. Use the no
form to disable this function.
S
YNTAX
[no] ip arp inspection
D
EFAULT
S
ETTING
Disabled
C
OMMAND
M
ODE
Global Configuration
C
OMMAND
U
SAGE
◆
When ARP Inspection is enabled globally with this command, it
becomes active only on those VLANs where it has been enabled with
the
command.
◆
When ARP Inspection is enabled globally and enabled on selected
VLANs, all ARP request and reply packets on those VLANs are
redirected to the CPU and their switching is handled by the ARP
Inspection engine.
◆
When ARP Inspection is disabled globally, it becomes inactive for all
VLANs, including those where ARP Inspection is enabled.
◆
When ARP Inspection is disabled, all ARP request and reply packets
bypass the ARP Inspection engine and their manner of switching
matches that of all other packets.
◆
Disabling and then re-enabling global ARP Inspection will not affect the
ARP Inspection configuration for any VLANs.
◆
When ARP Inspection is disabled globally, it is still possible to configure
ARP Inspection for individual VLANs. These configuration changes will
only become active after ARP Inspection is globally enabled again.
E
XAMPLE
Console(config)#ip arp inspection
Console(config)#
Shows statistics about the number of ARP packets
processed, or dropped for various reasons
PE
Shows configuration setting for VLANs, including ARP
Inspection status, the ARP ACL name, and if the
DHCP Snooping database is used after ACL validation
is completed
PE
Table 80: ARP Inspection Commands (Continued)
Command
Function
Mode