Ip Arp Inspection Vlan - D-Link DGS-6600-48T Cli Reference Manual

DGS-6604

ip arp inspection vlan

ip arp inspection vlan VLAN-ID [, | -]
no ip arp inspection vlan VLAN-ID [, | -]
Syntax Description
vlan VLAN-ID
,
-
Default
Command Mode
Usage Guideline
Example
Switch# configure terminal
Switch(config)# ip arp inspection vlan 2
Switch(config)#
CLI Reference Guide
Use the command to enable specific VLANs for dynamic ARP inspection. Use
the no form of the command disable dynamic ARP inspection for VLAN.
Specify the VLAN to enable or disable the ARP inspection function.
(Optional) Specify a series of VLANs, or separate a range of VLANs from a
previous range. Enter a space before and after the comma.
(Optional) Specify a range of VLANs. Enter a space before and after the hyphen.
ARP inspection is disabled on all VLANs.
Global configuration mode
When a VLAN is enabled for ARP inspection, the ARP packets, including both
ARP request and response packet belonging to the VLAN arriving at the un-
trusted interface will be validated. If the IP to MAC address binding pair the
source MAC address and the source IP address in the Ethernet header is not
permitted by the ARP ACL or the DHCP snooping binding database, the ARP
packet will be dropped.
This example shows how to enable ARP inspection on VLAN2:
ip arp inspection vlan
230