beautypg.com

Ip arp inspection validate – Dell PowerEdge VRTX User Manual

Page 636

background image

636

DHCP Snooping Commands

FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC

2+3\new_system_mifs_ARC2_latest\DHCP_Snooping.fm

D E L L C O N F ID E N T IA L – P R E L IM I N A RY 4 / 3 /1 4 - FO R P R O O F O N LY

User Guidelines

The device does not check ARP packets that are received on the trusted

interface; it only forwards the packets.
For untrusted interfaces, the device intercepts all ARP requests and

responses. It verifies that the intercepted packets have valid IP-to-MAC

address bindings before updating the local cache and before forwarding the

packet to the appropriate destination. The device drops invalid packets and

logs them in the log buffer according to the logging configuration specified

with the ip arp inspection log-buffer vlan Global Configuration mode

command.

Example

The following example configures

gi0/

3 as a trusted interface.

console(config)# interface gi0/3

console(config-if)# ip arp inspection trust

ip arp inspection validate

Use the ip arp inspection validate Global Configuration mode command to

perform specific checks for dynamic Address Resolution Protocol (ARP)

inspection. Use the no form of this command to restore the default

configuration.

Syntax

ip arp inspection validate
no ip arp inspection validate

Parameters

N/A

Default Configuration

ARP inspection validation is disabled.

Command Mode

Global Configuration mode