Command Reference Guide

Dynamic ARP Inspection Commands
CLI Command Reference
September 2014 Page 415
HP Moonshot Switch Module CLI Command Reference
ip arp inspection limit
Use this command to configure the rate limit and burst interval values for an interface or range of interfaces.
Configuring
none for the limit means the interface is not rate limited for Dynamic ARP Inspections. The
maximum pps value shown in the range for the rate option might be more than the hardware allowable limit.
Therefore you need to understand the switch performance and configure the maximum rate pps accordingly.
no ip arp inspection limit
Use this command to set the rate limit and burst interval values for an interface to the default values of 15 pps
and 1 second, respectively.
ip arp inspection filter
Use this command to configure the ARP ACL used to filter invalid ARP packets on a list of comma-separated
VLAN ranges. If the static keyword is given, packets that do not match a permit statement are dropped without
consulting the DHCP snooping bindings.
no ip arp inspection filter
Use this command to unconfigure the ARP ACL used to filter invalid ARP packets on a list of comma-separated
VLAN ranges.
Note: The user interface will accept a rate limit for a trusted interface, but the limit will not be
enforced unless the interface is configured to be untrusted.
Default 15 pps for rate and 1 second for burst-interval
Format
ip arp inspection limit {rate pps [burst interval seconds] | none}
Mode Interface Config
Format
no ip arp inspection limit
Mode Interface Config
Default No ARP ACL is configured on a VLAN
Format
ip arp inspection filter acl-name vlan vlan-list [static]
Mode Global Config
Format
no ip arp inspection filter acl-name vlan vlan-list [static]
Mode Global Config