Kontron CP6923, Reference Manual, Page: 133 / 480

CP6923 Switching Commands
Page 2 - 89 CP6923 CLI Reference Manual
2.17.7 arp access-list
Use this command to create an ARP ACL.
2.17.7.1 no arp access-list
Use this command to delete a configured ARP ACL.
2.17.8 permit ip host mac host
Use this command to configure a rule for a valid IP address and MAC address combination used in ARP packet
validation.
2.17.8.1 no permit ip host mac host
Use this command to delete a rule for a valid IP and MAC combination.
2.17.9 show ip arp inspection
Use this command to display the Dynamic ARP Inspection global configuration and configuration on all the VLANs.
With the
vlan-list argument (i.e. comma separated VLAN ranges), the command displays the global configuration
and configuration on all the VLANs in the given VLAN list. The global configuration includes the source mac
validation , destination mac validation and invalid IP validation information.
Format
arp access-list acl-name
Mode Global Config
Format
no arp access-list acl-name
Mode Global Config
Format
permit ip host sender-ip mac host sender-mac
Mode ARP Access-list Config
Format
no permit ip host sender-ip mac host sender-mac
Mode ARP Access-list Config
Format
show ip arp inspection [vlan <vlan-list>]
Mode • Privileged EXEC
• User EXEC
Term Definition
Source MAC
Validation
Displays whether Source MAC Validation of ARP frame is enabled or disabled.
Destination MAC
Validation
Displays whether Destination MAC Validation is enabled or disabled.
IP Address
Validation
Displays whether IP Address Validation is enabled or disabled.
VLAN The VLAN ID for each displayed row.
Configuration Displays whether DAI is enabled or disabled on the VLAN.