Home » Netgear Manuals » Hubs & Switches » Netgear GSM7252PS » Manual Viewer

Netgear GSM7252PS 7200 Series Managed Switch CLI Refernce Manual for Software - Page 168

Dynamic ARP Inspection Commands

UPC - 606449071665

Add to My Manuals
Save this manual to your list of manuals

Page 168 highlights

ProSafe 7200 Managed Switches CLI Manual, Software Version 8.0.3 Example: The following shows example CLI display output for the command. (switch) #show ip source binding MAC Address IP Address Type Vlan Interface 00:00:00:00:00:08 1.2.3.4 dhcp-snooping 2 1/0/1 00:00:00:00:00:09 1.2.3.4 dhcp-snooping 3 1/0/1 00:00:00:00:00:0A 1.2.3.4 dhcp-snooping 4 1/0/1 Dynamic ARP Inspection Commands Dynamic ARP Inspection (DAI) is a security feature that rejects invalid and malicious ARP packets. DAI prevents a class of man-in-the-middle attacks, where an unfriendly station intercepts traffic for other stations by poisoning the ARP caches of its unsuspecting neighbors. The miscreant sends ARP requests or responses mapping another station's IP address to its own MAC address. DAI relies on DHCP snooping. DHCP snooping listens to DHCP message exchanges and builds a binding database of valid {MAC address, IP address, VLAN, and interface} tuples. When DAI is enabled, the switch drops ARP packets whose sender MAC address and sender IP address do not match an entry in the DHCP snooping bindings database. You can optionally configure additional ARP packet validation. ip arp inspection vlan Use this command to enable Dynamic ARP Inspection on a list of comma-separated VLAN ranges. Default Format Mode disabled ip arp inspection vlan vlan-list Global Config no ip arp inspection vlan Use this command to disable Dynamic ARP Inspection on a list of comma-separated VLAN ranges. Switching Commands v1.0, May 2010 3-130

Section	Page
ProSafe 7200 Managed Switches CLI Manual, Software Version 8.0.3	1
Contents	5
About This Manual	11
Audience	11
About the Software	11
Scope	12
Product Concept	12
Conventions, Formats, and Scope	12
How to Print This Manual	14
Revision History	14
Chapter 1 Using the Command-Line Interface	15
Command Syntax	15
Command Conventions	16
Common Parameter Values	17
Slot/Port Naming Convention	17
Using the “No” Form of a Command	18
Managed Switch Modules	19
Command Modes	19
Command Completion and Abbreviation	23
CLI Error Messages	23
CLI Line-Editing Conventions	24
Using CLI Help	25
Accessing the CLI	26
Chapter 2 Stacking Commands	27
Dedicated Port Stacking	27
Front Panel Stacking Commands	36
Chapter 3 Switching Commands	39
Port Configuration Commands	40
Spanning Tree Protocol (STP) Commands	48
VLAN Commands	68
Double VLAN Commands	83
Voice VLAN Commands	85
Provisioning (IEEE 802.1p) Commands	88
Protected Ports Commands	89
Private Group Commands	91
GARP Commands	93
GVRP Commands	96
GMRP Commands	98
Port-Based Network Access Control Commands	101
Storm-Control Commands	115
Port-Channel/LAG (802.3ad) Commands	127
Port Mirroring	150
Static MAC Filtering	152
DHCP Snooping Configuration Commands	157
Dynamic ARP Inspection Commands	168
IGMP Snooping Configuration Commands	176
IGMP Snooping Querier Commands	185
Port Security Commands	191
LLDP (802.1AB) Commands	195
LLDP-MED Commands	206
Denial of Service Commands	217
MAC Database Commands	229
ISDP Commands	231
Chapter 4 Routing Commands	238
Address Resolution Protocol (ARP) Commands	238
IP Routing Commands	245
Virtual LAN Routing Commands	257
DHCP and BOOTP Relay Commands	258
IP Helper Commands	260
ICMP Throttling Commands	263
Chapter 5 Power Over Ethernet Commands	266
Power Over Ethernet (PoE) Commands	267
Chapter 6 Quality of Service (QoS) Commands	277
Class of Service (CoS) Commands	278
Differentiated Services (DiffServ) Commands	284
DiffServ Class Commands	286
DiffServ Policy Commands	295
DiffServ Service Commands	301
DiffServ Show Commands	302
MAC Access Control List (ACL) Commands	308
IP Access Control List (ACL) Commands	313
IPv6 Access Control List (ACL) Commands	320
Auto-Voice over IP Commands	324
Chapter 7 Utility Commands	327
Auto Install Commands	328
Dual Image Commands	330
System Information and Statistics Commands	332
Logging Commands	344
System Utility and Clear Commands	349
Simple Network Time Protocol (SNTP) Commands	359
DHCP Server Commands	365
DNS Client Commands	380
Packet Capture Commands	386
Serviceability Packet Tracing Commands	388
Cable Test Command	408
sFlow Commands	409
Software License Commands	414
Chapter 8 Management Commands	417
Configuring the Switch Management CPU	418
Network Interface Commands	420
Console Port Access Commands	424
Telnet Commands	427
Secure Shell (SSH) Commands	432
Management Security Commands	435
Hypertext Transfer Protocol (HTTP) Commands	436
Access Commands	444
User Account Commands	445
SNMP Commands	456
RADIUS Commands	468
TACACS+ Commands	483
Configuration Scripting Commands	487
Pre-login Banner and System Prompt Commands	489
Chapter 9 Log Messages	491
Core	491
Utilities	494
Management	496
Switching	500
QoS	506
Routing/IPv6 Routing	507
Multicast	511
Stacking	513
Technologies	513
O/S Support	516
Chapter 10 Captive Portal Commands	518
Capitve Portal Global Commands	518
Captive Portal Configuration Commands	522
Captive Portal Status Commands	531
Captive Portal Client Connection Commands	536
Captive Portal Interface Commands	540
Captive Portal Local User Commands	541
Captive Portal User Group Commands	548
Chapter 11 Command List	550
{deny \| permit} (IP ACL) 6-40	550
{deny \| permit} (IPv6) 6-45	550
{deny \| permit} (MAC ACL) 6-34	550
aaa authentication dot1x 8-39	550
aaa authentication login 8-37	550
aaa authenticaton enable 8-38	550
access-list 6-37	550
acl-trapflags 6-42	550
addport 3-91	550
arp 4-2	550
arp access-list 3-134	550
arp cachesize 4-3	550
arp dynamicrenew 4-3	550
arp purge 4-4	550
arp resptime 4-4	550
arp retries 4-4	550
arp timeout 4-5	550
assign-queue 6-20	550
authentication timeout 10-3	550
authorization network radius 8-52	550
auto-negotiate 3-3	550
auto-negotiate all 3-4	550
auto-voip 6-49	550
auto-voip all 6-48	550
block 10-14	550
boot autoinstall auto-save 7-3	550
boot autoinstall retry-count 7-4	550
boot autoinstall start 7-3	550
boot autoinstall stop 7-3	550
boot system 7-5	550
bootfile 7-45	550
bootpdhcprelay cidoptmode 4-21	550
bootpdhcprelay maxhopcount 4-22	550
bootpdhcprelay minwaittime 4-22	550
bridge aging-time 3-191	551
cablestatus 7-83	551
captive-portal client deauthenticate 10-23	551
captive-portal 10-1	551
capture wrap 7-62	551
class 6-21	551
class-map 6-10	551
class-map rename 6-11	551
classofservice dot1p-mapping 6-2	551
classofservice ip-dscp-mapping 6-2	551
classofservice trust 6-3	551
clear arp-cache 4-5	551
clear arp-switch 4-6	551
clear captive-portal users 10-31	551
clear config 7-27	551
clear counters 7-27	551
clear dot1x statistics 3-63	551
clear host 7-59	551
clear igmpsnooping 7-28	551
clear ip arp inspection statistics 3-137	551
clear ip dhcp binding 7-51	551
clear ip dhcp conflict 7-51	551
clear ip dhcp server statistics 7-51	551
clear ip dhcp snooping binding 3-128	551
clear ip dhcp snooping statistics 3-128	551
clear ip route all 4-13	551
clear isdp counters 3-195	551
clear isdp table 3-195	551
clear lldp remote-data 3-162	551
clear lldp statistics 3-161	551
clear logging buffered 7-27	551
clear mac-addr-table 7-27	551
clear pass 7-28	551
clear port-channel 7-28	551
clear radius statistics 3-63	551
clear traplog 7-28	551
clear vlan 7-28	551
client-identifier 7-41	551
client-name 7-42	551
clock timezone 7-37	551
configuration 8-8	552
configuration (Captive Portal) 10-5	552
conform-color 6-21	552
copy 7-32	552
copy (pre-login banner) 8-73	552
cos-queue min-bandwidth 6-4	552
cos-queue strict 6-4	552
crypto certificate generate 8-19	552
crypto key generate dsa 8-20	552
crypto key generate rsa 8-20	552
debug arp 7-63	552
debug auto-voip 7-63	552
debug clear 7-64	552
debug console 7-64	552
debug dot1x packet 7-65	552
debug igmpsnooping packet 7-65	552
debug igmpsnooping packet receive 7-67	552
debug igmpsnooping packet transmit 7-66	552
debug ip acl 7-68	552
debug ip dvmrp packet 7-68	552
debug ip igmp packet 7-69	552
debug ip mcache packet 7-69	552
debug ip pimdm packet 7-70	552
debug ip pimsm packet 7-71	552
debug ip vrrp 7-71	552
debug ipv6 mcache packet 7-72	552
debug ipv6 mld packet 7-72	552
debug ipv6 pimdm packet 7-73	552
debug ipv6 pimsm packet 7-73	552
debug isdp packet 3-199	552
debug lacp packet 7-74	552
debug mldsnooping packet 7-74	552
debug ospf packet 7-75	552
debug ospfv3 packet 7-77	552
debug ping packet 7-78	552
debug rip packet 7-79	552
debug sflow packet 7-80	552
debug spanning-tree bpdu 7-80	552
debug spanning-tree bpdu receive 7-81	552
debug spanning-tree bpdu transmit 7-82	552
default-router 7-42	553
delete 7-4	553
deleteport (Global Config) 3-91	553
deleteport (Interface Config) 3-91	553
description 3-4	553
diffserv 6-9	553
disconnect 8-28	553
dns-server 7-43	553
domain-name 7-46	553
dos-control all 3-180	553
dos-control firstfrag 3-181	553
dos-control icmp 3-183	553
dos-control icmpfrag 3-189	553
dos-control icmpv4 3-188	553
dos-control icmpv6 3-189	553
dos-control l4port 3-182	553
dos-control sipdip 3-180	553
dos-control smacdmac 3-183	553
dos-control tcpfinurgpsh 3-187	553
dos-control tcpflag 3-182	553
dos-control tcpflagseq 3-185	553
dos-control tcpfrag 3-181	553
dos-control tcpoffset 3-186	553
dos-control tcpport 3-184	553
dos-control tcpsyn 3-186	553
dos-control tcpsynfin 3-187	553
dos-control udpport 3-184	553
dot1x guest-vlan 3-64	553
dot1x initialize 3-64	553
dot1x max-req 3-65	553
dot1x max-users 3-65	553
dot1x port-control 3-66	553
dot1x port-control all 3-66	553
dot1x re-authenticate 3-67	553
dot1x re-authentication 3-67	553
dot1x system-auth-control 3-68	553
dot1x timeout 3-68	553
dot1x unauthenticated-vlan 3-69	553
dot1x user 3-70	553
drop 6-20	553
dvlan-tunnel ethertype 3-45	554
enable (Privileged EXEC access) 8-4	554
enable authentication 8-10	554
enable password 7-29	554
enable 10-1	554
enable (Instance) 10-6	554
encapsulation 4-13	554
ezconfig 8-2	554
filedescr 7-5	554
group 10-8	554
hardware-address 7-43	554
hashing-mode 3-106	554
host 7-44	554
http port 10-2	554
https port 10-2	554
idle-timeout 10-12	554
interface 3-2	554
interface (Captive Portal) 10-13	554
interface lag 3-3	554
interface range 3-2	554
interface vlan 3-3	554
ip access-group 6-41	554
ip access-list 6-39	554
ip access-list rename 6-40	554
ip address 4-9	554
ip arp inspection filter 3-133	554
ip arp inspection limit 3-132	554
ip arp inspection trust 3-132	554
ip arp inspection validate 3-131	554
ip arp inspection vlan 3-130	554
ip arp inspection vlan logging 3-131	554
ip dhcp bootp automatic 7-50	554
ip dhcp conflict logging 7-50	554
ip dhcp excluded-address 7-48	554
ip dhcp ping packets 7-49	554
ip dhcp pool 7-41	554
ip dhcp snooping 3-119	554
ip dhcp snooping binding 3-121	554
ip dhcp snooping database 3-120	554
ip dhcp snooping database write-delay 3-121	554
ip dhcp snooping limit 3-122	555
ip dhcp snooping log-invalid 3-123	555
ip dhcp snooping trust 3-123	555
ip dhcp snooping verify mac-address 3-120	555
ip dhcp snooping vlan 3-119	555
ip domain list 7-56	555
ip domain lookup 7-55	555
ip domain name 7-56	555
ip domain retry 7-58	555
ip domain timeout 7-59	555
ip helper-address 4-25	555
ip helper-address (Global Config) 4-24	555
ip helper-address discard 4-25	555
ip host 7-57	555
ip http authentication 8-23	555
ip http java 8-22	555
ip http secure-port 8-26	555
ip http secure-protocol 8-27	555
ip http secure-server 8-21	555
ip http secure-session hard-timeout 8-25	555
ip http secure-session maxsessions 8-24	555
ip http secure-session soft-timeout 8-25	555
ip http server 8-21	555
ip http session hard-timeout 8-22	555
ip http session maxsessions 8-23	555
ip http session soft-timeout 8-24	555
ip https authentication 8-26	555
ip icmp echo-reply 4-27	555
ip icmp error-interval 4-28	555
ip igmpsnooping unknown-multicast 3-144	555
ip mtu 4-12	555
ip name server 7-57	555
ip netdirbcast 4-11	555
ip proxy-arp 4-2	555
ip redirects 4-27	555
ip route 4-9	555
ip route default 4-10	555
ip route distance 4-11	555
ip routing 4-8	555
ip ssh 8-16	555
ip ssh protocol 8-17	556
ip ssh server enable 8-17	556
ip telnet server enable 8-11	556
ip unreachables 4-26	556
ip verify binding 3-122	556
ip verify source 3-124	556
ipv6 access-list 6-44	556
ipv6 access-list rename 6-45	556
ipv6 host 7-58	556
ipv6 traffic-filter 6-46	556
isdp advertise-v2 3-194	556
isdp enable 3-195	556
isdp holdtime 3-194	556
isdp run 3-193	556
isdp timer 3-194	556
key 8-69	556
lacp actor admin 3-93	556
lacp actor admin key 3-93	556
lacp actor admin state individual 3-94	556
lacp actor admin state longtimeout 3-94	556
lacp actor admin state passive 3-95	556
lacp actor port priority 3-96	556
lacp actor system priority 3-96	556
lacp admin key 3-92	556
lacp collector max-delay 3-92	556
lacp partner admin key 3-97	556
lacp partner admin state individual 3-97	556
lacp partner admin state longtimeout 3-98	556
lacp partner admin state passive 3-99	556
lacp partner port id 3-99	556
lacp partner port priority 3-100	556
lacp partner system id 3-101	556
lacp partner system priority 3-101	556
lease 7-44	556
line 8-8	556
lldp med 3-168	556
lldp med all 3-170	556
lldp med confignotification 3-169	556
lldp med confignotification all 3-170	556
lldp med faststartrepeatcount 3-171	556
lldp med transmit-tlv 3-169	557
lldp med transmit-tlv all 3-171	557
lldp notification 3-160	557
lldp notification-interval 3-161	557
lldp receive 3-158	557
lldp timers 3-158	557
lldp transmit 3-158	557
lldp transmit-mgmt 3-160	557
lldp transmit-tlv 3-159	557
locale 10-13	557
logging buffered 7-18	557
logging buffered wrap 7-19	557
logging cli-command 7-19	557
logging console 7-20	557
logging host 7-20	557
logging host remove 7-21	557
logging persistent 7-24	557
logging syslog 7-21	557
login authentication 8-9	557
logout 7-29	557
mac access-group 6-35	557
mac access-list extended 6-33	557
mac access-list extended rename 6-33	557
macfilter 3-114	557
macfilter adddest 3-115	557
macfilter adddest all 3-116	557
macfilter addsrc 3-117	557
macfilter addsrc all 3-117	557
mark cos 6-22	557
mark ip-precedence 6-23	557
match any 6-12	557
match class-map 6-12	557
match cos 6-13	557
match destination-address mac 6-14	557
match dstip 6-14	557
match dstip6 6-15	557
match dstl4port 6-15	557
match ethertype 6-12	557
match ip dscp 6-15	557
match ip precedence 6-16	557
match ip tos 6-16	558
match ip6flowlbl 6-14	558
match protocol 6-17	558
match source-address mac 6-18	558
match srcip 6-18	558
match srcip6 6-18	558
match srcl4port 6-18	558
max-bandwidth-down 10-9	558
max-bandwidth-up 10-9	558
max-input-octets 10-10	558
max-output-octets 10-11	558
max-total-octets 10-11	558
member 2-2	558
mirror 6-20	558
mode dot1q-tunnel 3-45	558
mode dvlan-tunnel 3-46	558
monitor session 3-112	558
movemanagement 2-3	558
mtu 3-5	558
name 10-6	558
netbios-name-server 7-46	558
netbios-node-type 7-47	558
network (DHCP Pool Config) 7-45	558
network javamode 8-6	558
network mac-address 8-5	558
network mac-type 8-5	558
network mgmt_vlan 3-30	558
network parms 8-4	558
network protocol 8-5	558
next-server 7-47	558
no monitor 3-113	558
option 7-48	558
passwords aging 8-35	558
passwords history 8-35	558
passwords lock-out 8-36	558
passwords min-length 8-34	558
permit ip host mac host 3-134	558
ping 7-29	558
poe 5-3	558
poe detection 5-3	558
poe high-power 5-4	559
poe power limit 5-5	559
poe power management 5-5	559
poe priority 5-6	559
poe reset 5-7	559
poe reset auto 5-7	559
poe traps 5-9	559
poe usagethreshold 5-8	559
police-simple 6-23	559
policy-map 6-24	559
policy-map rename 6-25	559
port 8-69	559
port lacpmode 3-103	559
port lacpmode enable all 3-103	559
port lacptimeout (Global Config) 3-104	559
port lacptimeout (Interface Config) 3-104	559
port-channel 3-90	559
port-channel adminmode 3-105	559
port-channel linktrap 3-105	559
port-channel load-balance 3-106	559
port-channel name 3-108	559
port-channel static 3-102	559
port-channel system priority 3-108	559
port-security 3-154	559