Command Line Interface Reference Guide | arp-protect |
| |
■src-mac-- Drop any ARP request or response packet in which the source MAC in the ethernet header does not match the sender MAC address in the body of the packet. (p. 66)
■[no] arp-protect vlan -- Enable/disable Dynamic ARP Protection on a VLAN(s). (p. 67)
■vlan-list-- (VLAN-ID-RANGE) (p. 67)
COMMAND DETAILS
dest-mac
■[no] arp-protect validate dest-mac
Drop any ARP response packet in which the destination MAC address in the ethernet header does not match the target MAC address in the body of the packet.
ip
■[no] arp-protect validate ip
Drop any ARP request with an invalid sender IP address. Drop any ARP response with an invalid target IP address. Invalid IP addresses include 0.0.0.0, 255.255.255.255, all IP multicast addresses, and all class E IP addresses.
src-mac
■[no] arp-protect validate src-mac
Drop any ARP request or response packet in which the source MAC in the ethernet header does not match the sender MAC address in the body of the packet.
trust
■[no] arp-protect trust [ETHERNET] PORT-LIST
Configure port(s) as trusted or untrusted.
validate
■[no] arp-protect validate
Configure additional ARP Protection validation checks.
Next Available Options:
■src-mac-- Drop any ARP request or response packet in which the source MAC in the ethernet header does not match the sender MAC address in the body of the packet. (p. 66)
■dest-mac-- Drop any ARP response packet in which the destination MAC address in the ethernet header does not match the target MAC address in the body of the packet. (p. 66)
■ip -- Drop any ARP request with an invalid sender IP address. Drop any ARP response with an invalid target IP address. Invalid IP addresses include 0.0.0.0, 255.255.255.255, all IP multicast addresses, and all class E IP addresses. (p. 66)
