Enterasys Networks 9034313-07 manual Clear arpinspection validate, With an invalid address

clear arpinspection validate

Examples

This example shows what is displayed when no VLANs are specified.

C3(su)->show arpinspection statistics

VLAN Forwarded Dropped

---------------- ---------

5 0 0

This example shows what information is displayed when one or more VLANs are specified.

C3(su)->show arpinspection				statistics	vlan 5
VLAN	DHCP		ACL	DHCP	ACL	Bad Src	Bad Dest	Invalid
	Drops		Drops	Permits	Permits	MAC	MAC	IP
---- ----------			----------	----------	---------- ----------		----------	---------
5		0	0	0	0	0	0	0

clear arpinspection validate

Use this command to remove additional optional ARP validation parameters that were previously configured.

Syntax

clear arpinspection validate {[src-mac][dst-mac] [ip]}

Parameters

src‐mac	Clear, or remove, the verification that the sender MAC address equals
	the source MAC address in the Ethernet header.
dst‐mac	Clear, or remove, the verification that the target MAC address equals
	the destination MAC address in the Ethernet header.
ip	Clear, or remove, checking the IP address and dropping ARP packets
	with an invalid address.

Defaults

All parameters are optional, but at least one parameter must be specified.

Mode

Switch command, read‐write.

Usage

This command removes previously configured additional validation of ARP packets by DAI, beyond the basic validation that the ARP packet’s sender MAC address and sender IP address match an entry in the DHCP snooping bindings database.

Use the show arpinspection vlan command to display the current status of the additional validation rules.

Example

This example removes all 3 additional validation conditions.

C3(su)->clear arpinspection validate src-mac dst-mac ip

SecureStack C3 Configuration Guide 17-27