Cisco SF550X-24, Administration Manual

Page: 482 / 725

Security
ARP Inspection
Cisco Sx350, SG350X, SG350XG, Sx550X & SG550XG Series Managed Switches, Firmware Release 2.2.5.x 326
16
- Never— Disabled SYSLOG dropped packet messages.
STEP 2
Click Apply . The settings are defined, and the Running Configuration file is updated.
Interfaces Settings
Packets from untrusted ports/LAGs are checked against the ARP Access Rules table and the
DHCP Snooping Binding database if DHCP Snooping is enabled (see the
DHCP Snooping
Binding Database page).
By default, ports/LAGs are ARP Inspection untrusted.
To change the ARP trusted status of a port/LAG:
STEP 1
Click Security > ARP Inspection > Interface Settings .
The ports/LAGs and their ARP trusted/untrusted status are displayed.
STEP 2
To set a port/LAG as untrusted, select the port/LAG and click Edit .
STEP 3
Select Trusted or Untrusted and click Apply to save the settings to the Running
Configuration file.
ARP Access Control
To add entries to the ARP Inspection table:
STEP 1
Click Security > ARP Inspection > ARP Access Control .
STEP 2
To add an entry, click Add .
STEP 3
Enter the fields:
• ARP Access Control Name— Enter a user-created name.
• IP Address— IP address of packet.
• MAC Address— MAC address of packet.
STEP 4
Click Apply . The settings are defined, and the Running Configuration file is updated.