clear arpinspection validate

Examples

This example shows what is displayed when no VLANs are specified.

C3(su)->show arpinspection statistics

VLAN Forwarded Dropped

---------------- ---------

5

0

0

This example shows what information is displayed when one or more VLANs are specified.

C3(su)->show arpinspection

statistics

vlan 5

 

 

 

VLAN

DHCP

 

ACL

DHCP

ACL

Bad Src

Bad Dest

Invalid

 

Drops

 

Drops

Permits

Permits

MAC

MAC

IP

---- ----------

----------

----------

---------- ----------

----------

---------

5

 

0

0

0

0

0

0

0

clear arpinspection validate

Use this command to remove additional optional ARP validation parameters that were previously configured.

Syntax

clear arpinspection validate {[src-mac][dst-mac] [ip]}

Parameters

src‐mac

Clear, or remove, the verification that the sender MAC address equals

 

the source MAC address in the Ethernet header.

 

 

dst‐mac

Clear, or remove, the verification that the target MAC address equals

 

the destination MAC address in the Ethernet header.

 

 

ip

Clear, or remove, checking the IP address and dropping ARP packets

 

with an invalid address.

 

 

Defaults

All parameters are optional, but at least one parameter must be specified.

Mode

Switch command, read‐write.

Usage

This command removes previously configured additional validation of ARP packets by DAI, beyond the basic validation that the ARP packet’s sender MAC address and sender IP address match an entry in the DHCP snooping bindings database.

Use the show arpinspection vlan command to display the current status of the additional validation rules.

Example

This example removes all 3 additional validation conditions.

C3(su)->clear arpinspection validate src-mac dst-mac ip

SecureStack C3 Configuration Guide 17-27

Page 537
Image 537
Enterasys Networks 9034313-07 manual Clear arpinspection validate, With an invalid address