Netgear XCM8806 Chassis Hardware Installation Guide - Page 627

NETGEAR 8800 Chassis Switch CLI Manual Displaying ARP Information To display how the switch builds an ARP table and learns MAC addresses for devices on a specific VLAN and associated member ports, use the following command: show ip-security arp learning {vlan} To view the ARP table, including permanent and DHCP secured ARP entries, use the following command: show iparp { | | vlan | permanent} {vr } Example The following command enables ARP learning on port 1:1 of the VLAN learn: enable ip-security arp learning learn-from-arp vlan learn ports 1:1 enable ip-security arp learning learn-from-dhcp enable ip-security arp learning learn-from-dhcp {vlan} ports [all | ] Description Enables DHCP secured ARP learning for the specified VLAN and member ports. Syntax Description vlan_name all ports Specifies the name of the VLAN to which this rule applies. Specifies all ingress ports. Specifies one or more ingress ports. Default By default, DHCP secured ARP learning is disabled. Usage Guidelines Use this command to configure the switch to add the MAC address and its corresponding IP address to the ARP table as a secure ARP entry. The switch does not update secure ARP entries, regardless of the ARP requests and replies seen by the switch. DHCP secured ARP is linked to the "DHCP snooping" feature. The same DHCP bindings database created when you enabled DHCP snooping is also used by DHCP secured ARP to create secure ARP entries. The switch only removes secure ARP entries when the corresponding DHCP entry is removed from the trusted DHCP bindings database. Chapter 15. Security Commands | 627