Security
ARP Inspection
Cisco 350XG & 550XG Series 10G Stackable Managed Switches
429
19
STEP 2
Click Apply. The settings are defined, and the Running Configuration file is
updated.
Interfaces Settings
Packets from untrusted ports/LAGs are checked against the ARP Access Rules
table and the DHCP Snooping Binding database if DHCP Snooping is enabled (see
the
DHCP Snooping Binding Database
page).
By default, ports/LAGs are ARP Inspection untrusted.
To change the ARP trusted status of a port/LAG:
STEP 1
Click Security > ARP Inspection > Interface Settings.
The ports/LAGs and their ARP trusted/untrusted status are displayed.
STEP 2
To set a port/LAG as untrusted, select the port/LAG and click
Edit
.
STEP 3
Select Trusted or Untrusted and click
Apply
to save the settings to the Running
Configuration file.
ARP Access Control
To add entries to the ARP Inspection table:
STEP 1
Click Security > ARP Inspection > ARP Access Control.
STEP 2
To add an entry, click
Add
.
STEP 3
Enter the fields:
•
ARP Access Control Name—Enter a user-created name.
•
IP Address—IP address of packet.
•
MAC Address—MAC address of packet.
STEP 4
Click Apply. The settings are defined, and the Running Configuration file is
updated.
