Home » Netgear Manuals » Hubs & Switches » Netgear GSM7228PS » Manual Viewer

Netgear GSM7228PS 7300 Series Managed Switch CLI Refernce Manual for Software - Page 167

Dynamic ARP Inspection Commands

UPC - 606449071696

Add to My Manuals
Save this manual to your list of manuals

Page 167 highlights

Managed Switch CLI Manual, Release 8.0.3 Example: The following shows example CLI display output for the command. (switch) #show ip source binding MAC Address IP Address Type Vlan Interface 00:00:00:00:00:08 1.2.3.4 dhcp-snooping 2 1/0/1 00:00:00:00:00:09 1.2.3.4 dhcp-snooping 3 1/0/1 00:00:00:00:00:0A 1.2.3.4 dhcp-snooping 4 1/0/1 Dynamic ARP Inspection Commands Dynamic ARP Inspection (DAI) is a security feature that rejects invalid and malicious ARP packets. DAI prevents a class of man-in-the-middle attacks, where an unfriendly station intercepts traffic for other stations by poisoning the ARP caches of its unsuspecting neighbors. The miscreant sends ARP requests or responses mapping another station's IP address to its own MAC address. DAI relies on DHCP snooping. DHCP snooping listens to DHCP message exchanges and builds a binding database of valid {MAC address, IP address, VLAN, and interface} tuples. When DAI is enabled, the switch drops ARP packets whose sender MAC address and sender IP address do not match an entry in the DHCP snooping bindings database. You can optionally configure additional ARP packet validation. ip arp inspection vlan Use this command to enable Dynamic ARP Inspection on a list of comma-separated VLAN ranges. Default Format Mode disabled ip arp inspection vlan vlan-list Global Config no ip arp inspection vlan Use this command to disable Dynamic ARP Inspection on a list of comma-separated VLAN ranges. Switching Commands v1.0, July 2010 3-131

Section	Page
ProSafe 7300S Managed Switches CLI Manual, Version 8.0.3	1
Contents	4
About This Manual	9
Audience	9
About Managed Switch Software	9
Scope	10
Conventions and Formats	11
How to Print This Manual	12
Revision History	12
Chapter 1 Using the Command-Line Interface	13
Command Syntax	13
Command Conventions	14
Common Parameter Values	15
Unit/Slot/Port Naming Convention	15
Using the “No” Form of a Command	16
Managed Switch Modules	17
Command Modes	17
Command Completion and Abbreviation	21
CLI Error Messages	21
CLI Line-Editing Conventions	22
Using CLI Help	23
Accessing the CLI	24
Chapter 2 Stacking Commands	25
Dedicated Port Stacking	25
Front Panel Stacking Commands	34
Chapter 3 Switching Commands	37
Port Configuration Commands	38
Spanning Tree Protocol (STP) Commands	47
VLAN Commands	67
Double VLAN Commands	82
Voice VLAN Commands	84
Provisioning (IEEE 802.1p) Commands	87
Protected Ports Commands	88
Private Group Commands	90
GARP Commands	92
GVRP Commands	95
GMRP Commands	97
Port-Based Network Access Control Commands	100
Storm-Control Commands	114
Port-Channel/LAG (802.3ad) Commands	126
Port Mirroring	149
Static MAC Filtering	151
DHCP Snooping Configuration Commands	156
Dynamic ARP Inspection Commands	167
IGMP Snooping Configuration Commands	175
IGMP Snooping Querier Commands	184
MLD Snooping Commands	189
MLD Snooping Querier Commands	198
Port Security Commands	202
LLDP (802.1AB) Commands	206
LLDP-MED Commands	217
Denial of Service Commands	228
MAC Database Commands	240
ISDP Commands	242
Chapter 4 Routing Commands	249
Address Resolution Protocol (ARP) Commands	249
IP Routing Commands	256
Router Discovery Protocol Commands	268
Virtual LAN Routing Commands	272
Virtual Router Redundancy Protocol Commands	273
DHCP and BOOTP Relay Commands	282
IP Helper Commands	285
Open Shortest Path First (OSPF) Commands	287
Routing Information Protocol (RIP) Commands	330
ICMP Throttling Commands	339
Chapter 5 IP Multicast Commands	342
Multicast Commands	342
DVMRP Commands	348
PIM-DM Commands	353
PIM-SM Commands	357
Internet Group Message Protocol (IGMP) Commands	367
IGMP Proxy Commands	376
Chapter 6 IPv6 Multicast Commands	382
IPv6 Multicast Forwarder	383
IPv6 PIM-DM Commands	385
IPv6 PIM-SM Commands	389
IPv6 MLD Commands	397
IPv6 MLD-Proxy Commands	404
Chapter 7 IPv6 Commands	411
IPv6 Management Commands	412
Tunnel Interface Commands	416
Loopback Interface Commands	418
IPv6 Routing Commands	420
OSPFv3 Commands	443
DHCPv6 Commands	478
Chapter 8 Quality of Service (QoS) Commands	488
Class of Service (CoS) Commands	489
Differentiated Services (DiffServ) Commands	495
DiffServ Class Commands	497
DiffServ Policy Commands	506
DiffServ Service Commands	512
DiffServ Show Commands	513
MAC Access Control List (ACL) Commands	519
IP Access Control List (ACL) Commands	524
IPv6 Access Control List (ACL) Commands	531
Auto-Voice over IP Commands	535
Chapter 9 Utility Commands	538
Auto Install Commands	539
Dual Image Commands	541
System Information and Statistics Commands	543
Logging Commands	555
System Utility and Clear Commands	561
Simple Network Time Protocol (SNTP) Commands	571
DHCP Server Commands	577
DNS Client Commands	592
Packet Capture Commands	598
Serviceability Packet Tracing Commands	600
Cable Test Command	620
sFlow Commands	621
Software License Commands	626
Chapter 10 Management Commands	628
Configuring the Switch Management CPU	629
Network Interface Commands	631
Console Port Access Commands	635
Telnet Commands	638
Secure Shell (SSH) Commands	643
Management Security Commands	646
Hypertext Transfer Protocol (HTTP) Commands	647
Access Commands	655
User Account Commands	656
SNMP Commands	667
RADIUS Commands	679
TACACS+ Commands	694
Configuration Scripting Commands	698
Pre-login Banner and System Prompt Commands	700
Chapter 11 Log Messages	702
Core	702
Utilities	705
Management	707
Switching	711
QoS	717
Routing/IPv6 Routing	718
Multicast	722
Stacking	724
Technologies	724
O/S Support	727
Chapter 12 Captive Portal Commands	729
Capitve Portal Global Commands	729
Captive Portal Configuration Commands	733
Captive Portal Status Commands	742
Captive Portal Client Connection Commands	747
Captive Portal Interface Commands	751
Captive Portal Local User Commands	752
Captive Portal User Group Commands	759
Chapter 13 List of Commands	761
{deny \| permit} (IP ACL) 8-40	761
{deny \| permit} (IPv6) 8-45	761
{deny \| permit} (MAC ACL) 8-34	761
1583compatibility 4-41	761
aaa authentication dot1x 10-39	761
aaa authentication login 10-37	761
aaa authenticaton enable 10-38	761
access-list 8-37	761
acl-trapflags 8-42	761
addport 3-92	761
area default-cost (OSPF) 4-41	761
area default-cost (OSPFv3) 7-38	761
area nssa (OSPF) 4-42	761
area nssa (OSPFv3) 7-38	761
area nssa default-info-originate (OSPF) 4-42	761
area nssa default-info-originate (OSPFv3) 7-39	761
area nssa no-redistribute (OSPF) 4-43	761
area nssa no-redistribute (OSPFv3) 7-39	761
area nssa no-summary (OSPF) 4-43	761
area nssa no-summary (OSPFv3) 7-40	761
area nssa translator-role (OSPF) 4-44	761
area nssa translator-role (OSPFv3) 7-40	761
area nssa translator-stab-intv (OSPF) 4-44	761
area nssa translator-stab-intv (OSPFv3) 7-40	761
area range (OSPF) 4-45	761
area range (OSPFv3) 7-41	761
area stub (OSPF) 4-45	761
area stub (OSPFv3) 7-41	761
area stub no-summary (OSPF) 4-46	761
area stub no-summary (OSPFv3) 7-42	761
area virtual-link (OSPF) 4-46	761
area virtual-link (OSPFv3) 7-42	761
area virtual-link authentication 4-47	761
area virtual-link dead-interval (OSPF) 4-47	762
area virtual-link dead-interval (OSPFv3) 7-43	762
area virtual-link hello-interval (OSPF) 4-48	762
area virtual-link hello-interval (OSPFv3) 7-43	762
area virtual-link retransmit-interval (OSPF) 4-48	762
area virtual-link retransmit-interval (OSPFv3) 7-44	762
area virtual-link transmit-delay (OSPF) 4-49	762
area virtual-link transmit-delay (OSPFv3) 7-44	762
arp 4-2	762
arp access-list 3-135	762
arp cachesize 4-3	762
arp dynamicrenew 4-3	762
arp purge 4-4	762
arp resptime 4-4	762
arp retries 4-4	762
arp timeout 4-5	762
assign-queue 8-20	762
authentication timeout 12-3	762
authorization network radius 10-52	762
auto-cost (OSPF) 4-49	762
auto-cost (OSPFv3) 7-45	762
auto-negotiate 3-3	762
auto-negotiate all 3-4	762
auto-summary 4-83	762
auto-voip 8-49	762
auto-voip all 8-48	762
bandwidth 4-50	762
block 12-14	762
boot autoinstall auto-save 9-3	762
boot autoinstall retry-count 9-4	762
boot autoinstall start 9-3	762
boot autoinstall stop 9-3	762
boot system 9-5	762
bootfile 9-45	762
bootpdhcprelay cidoptmode 4-34	762
bootpdhcprelay maxhopcount 4-34	762
bootpdhcprelay minwaittime 4-35	762
bridge aging-time 3-204	762
cablestatus 9-83	762
capability opaque 4-51	762
captive-portal client deauthenticate 12-23	763
captive-portal 12-1	763
capture wrap 9-62	763
class 8-21	763
class-map 8-10	763
class-map rename 8-11	763
classofservice dot1p-mapping 8-2	763
classofservice ip-dscp-mapping 8-2	763
classofservice trust 8-3	763
clear arp-cache 4-5	763
clear arp-switch 4-6	763
clear captive-portal users 12-31	763
clear config 9-27	763
clear counters 9-27	763
clear dot1x statistics 3-64	763
clear host 9-59	763
clear igmpsnooping 9-28	763
clear ip arp inspection statistics 3-138	763
clear ip dhcp binding 9-51	763
clear ip dhcp conflict 9-51	763
clear ip dhcp server statistics 9-51	763
clear ip dhcp snooping binding 3-129	763
clear ip dhcp snooping statistics 3-129	763
clear ip ospf 4-51	763
clear ip ospf configuration 4-51	763
clear ip ospf counters 4-51	763
clear ip ospf neighbor 4-52	763
clear ip ospf neighbor interface 4-52	763
clear ip ospf redistribution 4-52	763
clear ip route all 4-13	763
clear ipv6 dhcp 7-75	763
clear ipv6 neighbors 7-24	763
clear ipv6 ospf 7-46	763
clear ipv6 ospf configuration 7-46	763
clear ipv6 ospf counters 7-46	763
clear ipv6 ospf neighbor 7-46	763
clear ipv6 ospf neighbor interface 7-47	763
clear ipv6 ospf redistribution 7-47	763
clear ipv6 statistics 7-32	763
clear isdp counters 3-208	763
clear isdp table 3-208	764
clear lldp remote-data 3-175	764
clear lldp statistics 3-174	764
clear logging buffered 9-27	764
clear mac-addr-table 9-27	764
clear pass 9-28	764
clear port-channel 9-28	764
clear radius statistics 3-64	764
clear traplog 9-28	764
clear vlan 9-28	764
client-identifier 9-41	764
client-name 9-42	764
clock timezone 9-37	764
configuration 10-8	764
configuration (Captive Portal) 12-5	764
conform-color 8-21	764
copy 9-32	764
copy (pre-login banner) 10-73	764
cos-queue min-bandwidth 8-4	764
cos-queue strict 8-4	764
crypto certificate generate 10-19	764
crypto key generate dsa 10-20	764
crypto key generate rsa 10-20	764
debug arp 9-63	764
debug auto-voip 9-63	764
debug clear 9-64	764
debug console 9-64	764
debug dot1x packet 9-65	764
debug igmpsnooping packet 9-65	764
debug igmpsnooping packet receive 9-67	764
debug igmpsnooping packet transmit 9-66	764
debug ip acl 9-68	764
debug ip dvmrp packet 9-68	764
debug ip igmp packet 9-69	764
debug ip mcache packet 9-69	764
debug ip pimdm packet 9-70	764
debug ip pimsm packet 9-71	764
debug ip vrrp 9-71	764
debug ipv6 mcache packet 9-72	764
debug ipv6 mld packet 9-72	764
debug ipv6 pimdm packet 9-73	765
debug ipv6 pimsm packet 9-73	765
debug isdp packet 3-212	765
debug lacp packet 9-74	765
debug mldsnooping packet 9-74	765
debug ospf packet 9-75	765
debug ospfv3 packet 9-77	765
debug ping packet 9-78	765
debug rip packet 9-79	765
debug sflow packet 9-80	765
debug spanning-tree bpdu 9-80	765
debug spanning-tree bpdu receive 9-81	765
debug spanning-tree bpdu transmit 9-82	765
default-information originate (OSPF) 4-53	765
default-information originate (OSPFv3) 7-47	765
default-information originate (RIP) 4-84	765
default-metric (OSPF) 4-53	765
default-metric (OSPFv3) 7-48	765
default-metric (RIP) 4-84	765
default-router 9-42	765
delete 9-4	765
deleteport (Global Config) 3-92	765
deleteport (Interface Config) 3-92	765
description 3-5	765
diffserv 8-9	765
disconnect 10-28	765
distance ospf (OSPF) 4-54	765
distance ospf (OSPFv3) 7-48	765
distance rip 4-84	765
distribute-list out (OSPF) 4-54	765
distribute-list out (RIP) 4-85	765
dns-server 9-43	765
dns-server (IPv6) 7-72	765
domain-name 9-46	765
domain-name (IPv6) 7-71	765
dos-control all 3-193	765
dos-control firstfrag 3-194	765
dos-control icmp 3-196	765
dos-control icmpfrag 3-202	765
dos-control icmpv4 3-201	765
dos-control icmpv6 3-202	766
dos-control l4port 3-195	766
dos-control sipdip 3-193	766
dos-control smacdmac 3-196	766
dos-control tcpfinurgpsh 3-200	766
dos-control tcpflag 3-195	766
dos-control tcpflagseq 3-198	766
dos-control tcpfrag 3-194	766
dos-control tcpoffset 3-199	766
dos-control tcpport 3-197	766
dos-control tcpsyn 3-199	766
dos-control tcpsynfin 3-200	766
dos-control udpport 3-197	766
dot1x guest-vlan 3-65	766
dot1x initialize 3-65	766
dot1x max-req 3-66	766
dot1x max-users 3-66	766
dot1x port-control 3-67	766
dot1x port-control all 3-67	766
dot1x re-authenticate 3-68	766
dot1x re-authentication 3-68	766
dot1x system-auth-control 3-69	766
dot1x timeout 3-69	766
dot1x unauthenticated-vlan 3-70	766
dot1x user 3-71	766
drop 8-20	766
dvlan-tunnel ethertype 3-46	766
enable (OSPF) 4-39	766
enable (OSPFv3) 7-49	766
enable (Privileged EXEC access) 10-4	766
enable (RIP) 4-82	766
enable authentication 10-10	766
enable password 9-29	766
enable 12-1	766
enable (Instance) 12-6	766
encapsulation 4-13	766
exit-overflow-interval (OSPF) 4-55	766
exit-overflow-interval (OSPFv3) 7-49	766
external-lsdb-limit (OSPF) 4-55	766
external-lsdb-limit (OSPFv3) 7-50	766
ezconfig 10-2	767
filedescr 9-5	767
group 12-8	767
hardware-address 9-43	767
hashing-mode 3-107	767
host 9-44	767
hostroutesaccept 4-87	767
http port 12-2	767
https port 12-2	767
idle-timeout 12-12	767
interface 3-2	767
interface (Captive Portal) 12-13	767
interface lag 3-3	767
interface loopback 7-8	767
interface range 3-3	767
interface tunnel 7-6	767
interface vlan 3-3	767
ip access-group 8-41	767
ip access-list 8-39	767
ip access-list rename 8-40	767
ip address 4-9	767
ip arp inspection filter 3-134	767
ip arp inspection limit 3-133	767
ip arp inspection trust 3-133	767
ip arp inspection validate 3-132	767
ip arp inspection vlan 3-131	767
ip arp inspection vlan logging 3-132	767
ip dhcp bootp automatic 9-50	767
ip dhcp conflict logging 9-50	767
ip dhcp excluded-address 9-48	767
ip dhcp ping packets 9-49	767
ip dhcp pool 9-41	767
ip dhcp snooping 3-120	767
ip dhcp snooping binding 3-122	767
ip dhcp snooping database 3-121	767
ip dhcp snooping database write-delay 3-122	767
ip dhcp snooping limit 3-123	767
ip dhcp snooping log-invalid 3-124	767
ip dhcp snooping trust 3-124	767
ip dhcp snooping verify mac-address 3-121	767
ip dhcp snooping vlan 3-120	768
ip domain list 9-56	768
ip domain lookup 9-55	768
ip domain name 9-56	768
ip domain retry 9-58	768
ip domain timeout 9-59	768
ip dvmrp 5-8	768
ip dvmrp metric 5-7	768
ip dvmrp trapflags 5-8	768
ip dvmrp(Global Config) 5-7	768
ip helper-address 4-37	768
ip helper-address (Global Config) 4-36	768
ip helper-address discard 4-38	768
ip host 9-57	768
ip http authentication 10-23	768
ip http java 10-22	768
ip http secure-port 10-26	768
ip http secure-protocol 10-27	768
ip http secure-server 10-21	768
ip http secure-session hard-timeout 10-25	768
ip http secure-session maxsessions 10-24	768
ip http secure-session soft-timeout 10-25	768
ip http server 10-21	768
ip http session hard-timeout 10-22	768
ip http session maxsessions 10-23	768
ip http session soft-timeout 10-24	768
ip https authentication 10-26	768
ip icmp echo-reply 4-92	768
ip icmp error-interval 4-92	768
ip igmp 5-26	768
ip igmp last-member-query-count 5-27	768
ip igmp last-member-query-interval 5-28	768
ip igmp query-interval 5-28	768
ip igmp query-max-response-time 5-29	768
ip igmp robustness 5-29	768
ip igmp startup-query-count 5-30	768
ip igmp startup-query-interval 5-30	768
ip igmp version 5-27	768
ip igmp-proxy 5-35	768
ip igmp-proxy reset-status 5-36	768
ip igmp-proxy unsolicit-rprt-interval 5-35	769
ip igmpsnooping unknown-multicast 3-145	769
ip irdp 4-20	769
ip irdp address 4-21	769
ip irdp holdtime 4-21	769
ip irdp maxadvertinterval 4-22	769
ip irdp minadvertinterval 4-22	769
ip irdp preference 4-23	769
ip mcast boundary 5-2	769
ip mtu 4-12	769
ip multicast 5-2	769
ip multicast ttl-threshold 5-3	769
ip name server 9-57	769
ip netdirbcast 4-11	769
ip ospf area 4-40	769
ip ospf authentication 4-56	769
ip ospf cost 4-56	769
ip ospf dead-interval 4-57	769
ip ospf hello-interval 4-57	769
ip ospf mtu-ignore 4-60	769
ip ospf network 4-58	769
ip ospf priority 4-58	769
ip ospf retransmit-interval 4-59	769
ip ospf transmit-delay 4-59	769
ip pimdm (Global Config) 5-12	769
ip pimdm (Interface Config) 5-13	769
ip pimdm hello-interval 5-13	769
ip pimsm bsr-border 5-17	769
ip pimsm bsr-candidate 5-17	769
ip pimsm dr-priority 5-18	769
ip pimsm hello-interval 5-19	769
ip pimsm join-prune-interval 5-19	769
ip pimsm register-threshold 5-20	769
ip pimsm rp-address 5-20	769
ip pimsm rp-candidate 5-21	769
ip pimsm spt-threshold 5-21	769
ip pimsm ssm 5-22	769
ip pimsm(Global Config) 5-16	769
ip pimsm(Interface Config) 5-16	769
ip pim-trapflags 5-22	769
ip proxy-arp 4-2	770
ip redirects 4-91	770