5 validation commands – CANOGA PERKINS 9175 Configuration Guide User Manual
Page 245
CanogaOS Configuration Guide
37-3
DUT(config)#interface eth-0-1
Enter the Interface Configure mode and begin to
configure port eth-0-1.
DUT(config-if)#ip arp inspection trust
Configure the port to trust status.( usually configure
the connection between switches as trusted)
DUT(config-if)#exit Exit
the
Interface Configure mode.
DUT(config)#ip arp inspection vlan 2
Enable ARP Inspection on VLAN 2.
DUT(config)#ip arp inspection validate src-mac ip
dst-mac
Validate source MAC address, IP and destination
MAC address in ARP packet.
37.5 Validation Commands
Check the configuration of ARP Inspection on switch A
DUT#show ip arp inspection
Source Mac Validation : Enabled
Destination Mac Validation : Enabled
IP Address Validation : Enabled
Vlan Configuration ACL Match Static ACL
=================================================================
2 enabled
Vlan ACL Logging DHCP Logging
=================================================================
2 deny deny
Vlan Forwarded Dropped DHCP Drops ACL Drops
=================================================================
2 0 0 0 0
Vlan DHCP Permits ACL Permits Source MAC Failures
=================================================================
2 0 0 0
Vlan Dest MAC Failures IP Validation Failures Invalid Protocol Data
=================================================================
2 0 0 0
Show the log information of ARP Inspection on switch A
DUT#show ip arp inspection log
Total Log Buffer Size : 32
Syslog rate : 5 entries per 1 seconds.
No entries in log buffer