CLI Reference Guide-R04

Chapter 9 | General Security Measures
ARP Inspection
– 370 –
Default Setting
15
Command Mode
Interface Configuration (Port, Static Aggregation)
Command Usage
◆ This command applies to both trusted and untrusted ports.
◆ When the rate of incoming ARP packets exceeds the configured limit, the
switch drops all ARP packets in excess of the limit.
Example
Console(config)#interface ethernet 1/1
Console(config-if)#ip arp inspection limit rate 150
Console(config-if)#
ip arp inspection trust This command sets a port as trusted, and thus exempted from ARP Inspection. Use
the no form to restore the default setting.
Syntax
[no] ip arp inspection trust
Default Setting
Untrusted
Command Mode
Interface Configuration (Port, Static Aggregation)
Command Usage
Packets arriving on untrusted ports are subject to any configured ARP Inspection
and additional validation checks. Packets arriving on trusted ports bypass all of
these checks, and are forwarded according to normal switching rules.
Example
Console(config)#interface ethernet 1/1
Console(config-if)#ip arp inspection trust
Console(config-if)#