Alcatel-Lucent ls 6248 User Guide
Command Line Interface
646
4
User Guidelines
There are no user guidelines for this command.
Example
The following example globally enables the ARP inspection.
ip arp inspection vlan
The ip arp inspection vlan Global Configuration mode command enables ARP
inspection based on DHCP snooping database on a VLAN. To disable ARP
inspection on a VLAN, use the no form of this command.
inspection based on DHCP snooping database on a VLAN. To disable ARP
inspection on a VLAN, use the no form of this command.
Syntax
ip arp inspection vlan vlan-id
no ip arp inspection vlan vlan-id
Parameters
• vlan-id — Specifies the VLAN ID.
Default Configuration
The default configuration is set to disabled.
Command Mode
Global Configuration mode
User Guidelines
This command enables ARP inspection on a VLAN based on the DHCP
snooping database.The ip arp inspection list assign Global Configuration
mode command enables static ARP inspection.
snooping database.The ip arp inspection list assign Global Configuration
mode command enables static ARP inspection.
Example
The following example enables ARP inspection on VLAN ID 1.
ip arp inspection trust
The ip arp inspection trust Interface Configuration (Ethernet, Port-channel) mode
command configures an interface trust state that determines if incoming Address
Resolution Protocol (ARP) packets are inspected. To return to the default
configuration, use the no form of this command.
command configures an interface trust state that determines if incoming Address
Resolution Protocol (ARP) packets are inspected. To return to the default
configuration, use the no form of this command.
Console # (config)# ip arp inspection
Console # (config)# 01-Jan-2000 23:07:53 %ARPINSP-I-PCKTLOG: ARP packet
dropped from port g3 with VLAN tag 1 and reason: packet verification failed
SRC MAC 00:00:5e:00:01:07 SRC IP 10.6.22.193 DST MAC 00:00:00:00:00:00 DST
IP 10.6.22.195
Console # (config)# 01-Jan-2000 23:07:53 %ARPINSP-I-PCKTLOG: ARP packet
dropped from port g3 with VLAN tag 1 and reason: packet verification failed
SRC MAC 00:00:5e:00:01:07 SRC IP 10.6.22.193 DST MAC 00:00:00:00:00:00 DST
IP 10.6.22.195
Console # (config)# ip arp inspection vlan 1
Console # (config)#
Console # (config)#