D-Link DGS-3130 Emulator - Page 327

DGS-3130 Layer 3 Stackable Managed Switch CLI Reference Guide Example This example shows how to enable source MAC validation. Switch# configure terminal Switch(config)# ip arp inspection validate src-mac Switch(config)# 30-9 ip arp inspection vlan This command is used to enable specific VLANs for dynamic ARP inspection. Use the no form of this command to disable dynamic ARP inspection for VLAN. ip arp inspection vlan VLAN-ID [, | -] no ip arp inspection vlan VLAN-ID [, | -] Parameters VLAN-ID , - Specifies the VLAN to enable or disable the ARP inspection function. (Optional) Specifies a series of VLANs, or separate a range of VLANs from a previous range. No space is allowed before and after the comma. (Optional) Specifies a range of VLANs. No space is allowed before and after the hyphen. Default By default, ARP inspection is disabled on all VLANs. Command Mode Global Configuration Mode. Command Default Level Level: 12. Usage Guideline When a VLAN is enabled for ARP inspection, the ARP packets, including both the ARP request and response packet belonging to the VLAN arriving at the untrusted interface will be validated. If the IP-to-MAC address binding pair of the source MAC address and the source IP address is not permitted by the ARP ACL or the DHCP snooping binding database, the ARP packet will be dropped. In addition to the address binding check, the additional check defined by the IP ARP inspection validate command will also be checked. Example This example shows how to enable ARP inspection on VLAN 2. Switch# configure terminal Switch(config)# ip arp inspection vlan 2 Switch(config)# 30-10 ip arp inspection vlan logging This command is used to control the type of packets that are logged. Use the no form of this command to revert to the default settings. 323