Configuration Guide 588
Configuring Network Security
ARP Inspection Configurations
4.2 Using the CLI
4.2.1 Configuring ARP Detection
The ARP Detection feature allows the switch to detect the ARP packets basing on the
binding entries in the IP-MAC Binding Table and filter the illegal ARP packets. Before
configuring ARP Detection, complete IP-MAC Binding configuration. For details, refer to
.
Follow these steps to configure ARP Detection:
Step 1
configure
Enter global configuration mode.
Step 2
ip arp inspection
Globally enable the ARP Detection feature.
Step 3
interface { fastEthernet
port
|
range fastEthernet
port-list
|
gigabitEthernet
port
|
range
gigabitEthernet
port-list
}
Enter interface configuration mode.
Step 4
ip arp inspection trust
Configure the port as a trusted port, on which the ARP Detection function will not take
effect. The specific ports, such as up-linked ports and routing ports are suggested to be set
as trusted ports.
Step 5
show ip arp inspection
Verify the ARP Inspection configuration.
Step 6
end
Return to privileged EXEC mode.
Step 7
copy running-config startup-config
Save the settings in the configuration file.
The following example shows how to globally enable ARP Detection and configure port
1/0/1 as a trusted port.
Switch#configure
Switch(config)#ip arp inspection
Switch(config)#interface gigabitEthernet
1/0/1
Switch(config-if)#ip arp inspection trust
Switch(config-if)#show ip arp inspection
Summary of Contents for T2500G-10MPS
Page 1: ...User Guide T2500G 10MPS 1910012405 REV1 0 1 April 2018...
Page 24: ...Using the CLI 767 Appendix Default Parameters 773...
Page 145: ...Part 5 Monitoring Traffic CHAPTERS 1 Traffic Monitor 2 Appendix Default Parameters...
Page 172: ...Part 7 Configuring DDM CHAPTERS 1 Overview 2 DDM Configuration 3 Appendix Default Parameters...
