Brocade Multi-Service IronWare Switching Configuration Guide (Supporting R05.6.00) - Manual (Page 790)

760 Multi-Service IronWare Switching Configuration Guide
53-1003036-02
Dynamic ARP inspection
19
Adding an ARP entry for a VRF
IP Addresses can be uniquely determined by VRF. The VLAN number is not needed because the
VLAN information is obtained through the ARP protocol. To define an ARP inspection entry for a
specific VRF, enter commands such as the following.
Brocade(config)# vrf vpn1
Brocade(config-vrf-vpn1))#arp 10.53.4.2 1245.7654.2348 e 3/5
This command creates an ARP entry for vrf with IP address 10.53.4.2 and MAC address of
1245.7654.2348 on ethernet 3/5.
Syntax: [no] arp ip-addr mac-addr [ethernet slot/port]
The vrf-name parameter specifies the VRF you are configuring a static ARP entry for.
The ip-addr parameter specifies the IP address of the device that has the MAC address of the entry.
The mac-addr parameter specifies the MAC address of the entry.
The ethernet slot/port variable specifies the port number attached to the device that has the MAC
address of the entry.
Displaying ARP inspection information
You can display ARP inspection information using the show ip arp-inspection and the show ip
static-arp commands as shown in the following.
Displaying ARP inspection status and ports
To display the ARP inspection status for a VLAN and the trusted/untrusted ports in the VLAN, enter
the following command.
Syntax: show ip arp-inspection [vlan vlan_id]
The vlan vlan_id parameter specifies the ID of a configured VLAN.
Displaying ARP inspection statistics
You can use the show ip arp-statistics command to display ARP inspection counters for all ports on
the device, as shown in the following.
Brocade# show ip arp-inspection-statistics
Module 1:
Port Arp Packets Captured Arp Packets Failed Inspection
1/1 0 0
1/2 0 0
1/3 0 0
1/4 0 0
1/5 0 0
1/6 0 0
1/7 0 0
Brocade# show ip arp-inspection
ARP inspected VLANs:
1000
ARP inspection trusted ports:
ethe 2/1