Table of Contents
Advertisement
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Contax
CLI\files\DHCP_Snooping.fm
ip arp inspection trust
Use the ip arp inspection trust Interface Configuration (Ethernet, Port-
channel) mode command to configure an interface trust state that
determines if incoming Address Resolution Protocol (ARP) packets are
inspected. Use the no form of this command to restore the default
configuration.
Syntax
ip arp inspection trust
no ip arp inspection trust
Default Configuration
The interface is untrusted.
Command Mode
Interface Configuration (Ethernet, Port-channel) mode
User Guidelines
The device does not check ARP packets that are received on the trusted
interface; it only forwards the packets.
For untrusted interfaces, the device intercepts all ARP requests and
responses. It verifies that the intercepted packets have valid IP-to-MAC
address bindings before updating the local cache and before forwarding the
packet to the appropriate destination. The device drops invalid packets and
logs them in the log buffer according to the logging configuration specified
with the ip arp inspection log-buffer vlan Global Configuration mode
command.
Example
The following example configures gigabitethernet port 1/0/3 as a trusted
interface.
Console(config)#
gigabitethernet 1/0/3
interface
Console(config-if)#
ip arp inspection trust
D E L L C O N F I D E N T I A L – P R E L I M I N A R Y 5 / 1 5 / 1 2 - F O R P R O O F O N LY
578
DHCP Snooping and ARP Inspection Commands
Advertisement
Table of Contents
