ECS4100 Series CLI Reference Guide-R07

Chapter 9 | General Security Measures
ARP Inspection
– 368 –
Command Mode
Interface Configuration (Port, Static Aggregation)
Command Usage
Packets arriving on untrusted ports are subject to any configured ARP Inspection
and additional validation checks. Packets arriving on trusted ports bypass all of
these checks, and are forwarded according to normal switching rules.
Example
Console(config)#interface ethernet 1/1
Console(config-if)#ip arp inspection trust
Console(config-if)#
show ip arp inspection
configuration
This command displays the global configuration settings for ARP Inspection.
Command Mode
Privileged Exec
Example
Console#show ip arp inspection configuration
ARP Inspection Global Information:
Global IP ARP Inspection Status : disabled
Log Message Interval : 1 s
Log Message Number : 5
Need Additional Validation(s) : Yes
Additional Validation Type : Destination MAC address
Console#
show ip arp inspection
interface
This command shows the trust status and ARP Inspection rate limit for ports.
Syntax
show ip arp inspection interface [interface]
interface
ethernet unit/port
unit - Unit identifier. (Range: 1)
port - Port number. (Range: 1-12/26/28/52)
port-channel channel-id (Range: 1-16)
Command Mode
Privileged Exec