SMC Networks 6152PL2 FICHE, Руководство по управлению

Страница: 196 / 818

Configuring the Switch
3-140
3
Web – Click Security, ARP Inspection, Configuration. Enable inspection both
globally and for the required VLANs, select an ARP ACL filter to check for statically
configured addresses, select any required additional validation, adjust the logging
parameters if required, specify any untrusted ports which require ARP inspection,
and adjust the packet inspection rate. Then click Apply.
Figure 3-82 Configuring ARP Inspection
CLI – This example configures various inspection parameters for port 1.
Console(config)#ip arp inspection 4-191
Console(config)#
ip arp inspection vlan 1,2
4-192
Console(config)#ip arp inspection filter sales vlan 1 static 4-193
Console(config)#
ip arp inspection validate dst-mac
4-194
Console(config)#
ip arp inspection log-buffer logs 10 interval 100
4-195
Console(config)#interface ethernet 1/1 4-221
Console(config-if)#no
ip arp inspection trust
4-196
Console(config-if)#
ip arp inspection limit 50
4-196
Console(config-if)#exit
Console#show ip arp inspection configuration
4-197
ARP inspection global information:
Global IP ARP Inspection status : enabled
Log Message Interval : 100 s
Log Message Number : 10
Need Additional Validation(s) : Yes
Additional Validation Type : Destination MAC address
Console#show ip arp inspection interface ethernet 1/1
4-197
Port Number Trust Status Limit Rate (pps)
------------- -------------------- ------------------------------
Eth 1/1 untrusted 50
Console#