Dell Force10 E600i FTOS Version 8.4.1.5 Configuration Guide for ExaScale - Page 322

www.dell.com | support.dell.com View the number of entries in the ARP database with the show arp inspection database command. FTOS#show arp inspection database Protocol Address Age(min) Hardware Address Interface VLAN CPU Internet 10.1.1.251 - 00:00:4d:57:f2:50 Gi 0/2 Vl 10 CP Internet 10.1.1.252 - 00:00:4d:57:e6:f6 Gi 0/1 Vl 10 CP Internet 10.1.1.253 - 00:00:4d:57:f8:e8 Gi 0/3 Vl 10 CP Internet 10.1.1.254 - 00:00:4d:69:e8:f2 Te 0/50 Vl 10 CP FTOS# Use show arp inspection statistics command to see how many valid and invalid ARP packets have been processed. FTOS#show arp inspection statistics Dynamic ARP Inspection (DAI) Statistics Valid ARP Requests Valid ARP Replies Invalid ARP Requests Invalid ARP Replies FTOS# : 0 : 1000 : 1000 : 0 Bypass the ARP Inspection You can configure a port to skip ARP inspection by defining the interface as trusted, which is useful in multi-switch environments. ARPs received on trusted ports bypass validation against the binding table. All ports are untrusted by default. Task Command Syntax Command Mode Specify an interface as trusted so that ARPs are not validated against the binding table. arp inspection-trust INTERFACE FTOS Behavior: Introduced in FTOS version 8.2.1.0, Dynamic ARP Inspection (DAI) was available for Layer 3 only. FTOS version 8.2.1.1 extends DAI to Layer 2. Source Address Validation Using the DHCP binding table, FTOS can perform three types of source address validation (SAV): • IP Source Address Validation prevents IP spoofing by forwarding only IP packets that have been validated against the DHCP binding table. • DHCP MAC Source Address Validation verifies a DHCP packet's source hardware address matches the client hardware address field (CHADDR) in the payload. • IP+MAC Source Address Validation verifies that the IP source address and MAC source address are a legitimate pair. 322 | Dynamic Host Configuration Protocol