CANOGA PERKINS CanogaOS Configuration Guide - Manual (Page 305)

CanogaOS Configuration Guide
Proprietary & Confidential Canoga Perkins Metro Ethernet Switches Page 305 of 350
DUT(config)#interface eth-0-1 Enter the Interface Configure mode and begin to
configure port eth-0-1.
DUT(config-if)#ip arp inspection trust
Configure the port to trust status.( usually configure
the connection between switches as trusted)
DUT(config-if)#exit Exit the Interface Configure mode.
DUT(config)#ip arp inspection vlan 2 Enable ARP Inspection on VLAN 2.
DUT(config)#ip arp inspection validate src-mac ip
dst-mac Validate source MAC address, IP and destination
MAC address in ARP packet.
36.1.4 Validation Commands
1. Check the configuration of ARP Inspection on switch A
DUT#show ip arp inspection
Source Mac Validation : Enabled
Destination Mac Validation : Enabled
IP Address Validation : Enabled
Vlan Configuration ACL Match Static ACL
=================================================================
2 enabled
Vlan ACL Logging DHCP Logging
=================================================================
2 deny deny
Vlan Forwarded Dropped DHCP Drops ACL Drops
=================================================================
2 0 0 0 0
Vlan DHCP Permits ACL Permits Source MAC Failures
=================================================================
2 0 0 0
Vlan Dest MAC Failures IP Validation Failures Invalid Protocol Data
=================================================================
2 0 0 0
Show the log information of ARP Inspection on switch A
DUT#show ip arp inspection log