C613-50057-01 REV A
Command Reference for AT-IX5-28GPX High Availability, High Power Video Surveillance PoE Switch
1287
AlliedWare Plus™ Operating System - Version 5.4.5-0.x
DHCP S
NOOPING
C
OMMANDS
ARP
SECURITY
VIOLATION
arp security violation
Overview
Use this command to specify an additional action to perform if an ARP security
violation is detected on the ports. ARP security must also be enabled (
arp security
command).
Use the
no
variant of this command to remove the specified action, or all actions.
Traffic violating ARP security will be dropped, but no other action will be taken.
Syntax
arp security violation {log|trap|link-down} ...
no arp security violation [log|trap|link-down] ...
Default
When the switch detects an ARP security violation, it drops the packet. By default,
it does not perform any other violation actions.
Mode
Interface Configuration (switch ports, static or dynamic aggregated links)
Usage
When the switch detects an ARP security violation on an untrusted port in a VLAN
that has ARP security enabled, it drops the packet. This command sets the switch
to perform additional actions in response to ARP violations.
If a port has been shut down in response to a violation, to bring it back up again
after any issues have been resolved, use the
shutdown
command.
Example
To send SNMP notifications for ARP security violations on ports 1.0.1 to 1.0.6, use
the commands:
awplus#
configure terminal
awplus(config)#
snmp-server enable trap dhcpsnooping
awplus(config)#
interface port1.0.1-port1.0.6
awplus(config-if)#
arp security violation trap
Parameter
Description
log
Generate a log message. To display these messages, use the
show log
command.
trap
Generate an SNMP notification (trap). To send SNMP notifications,
SNMP must also be configured, and DHCP snooping notifications must
be enabled using the
snmp-server enable trap
command.
Notifications are limited to one per second and to one per source MAC
and violation reason. Additional violations within a second of a
notification being sent will not result in further notifications.
Default: disabled.
link-down
Shut down the port that received the packet.
Default: disabled.
