D-Link DGS-6600-48T Product Manual - Page 238

DGS-6604 ip arp inspection validate ip arp inspection validate Use the command to specify the additional checks to be performed during ARP inspection check. Use the no form of the command to remove specific additional check. ip arp inspection validate {[src-mac] [dst-mac] [ip]} no ip arp inspection validate [src-mac] [dst-mac] [ip] Syntax Description src-mac (Optional) Specify to check, for both ARP request response packets, the consistency of the source MAC address in the Ethernet header against the sender MAC address in the ARP payload. dst-mac (Optional) Specify to check, for ARP response packets, the consistency of the destination MAC address in the Ethernet header against the target MAC address in the ARP payload. ip (Optional) Checks the ARP body for invalid and unexpected IP addresses. Specify to check the validity of IP address in the ARP payload. Sender IP in both ARP request and response and target IP in ARP response are validated. Packets with addresses including 0.0.0.0, 255.255.255.255, and all IP multicast addresses are dropped. Sender IP addresses are checked in all ARP requests and responses, and target IP addresses are checked only in ARP responses. Default Command Mode Usage Guideline Example Disabled Global configuration mode Use the command to specify the additional checks to be performed during dynamic ARP inspection check. The specified check will be performed on packets arriving at the untrusted interface and belong to the VLANs that are enabled for ip arp inspection. Use the no form of the command with specific option to disabled specific type of check. This example shows how to enable source MAC validation: Switch# configure terminal Switch(config)# ip arp inspection validate src-mac Switch(config)# This example shows how to disable source MAC validation: CLI Reference Guide 228