Chapter 21 IP Source Guard

Figure 85 ARP Inspection Configure

The following table describes the labels in this screen.

Table 59 ARP Inspection Configure

LABEL

DESCRIPTION

Active

Select this to enable ARP inspection on the Switch. You still have to

 

enable ARP inspection on specific VLAN and specify trusted ports.

 

 

Filter Aging Time

 

 

 

Filter aging time

This setting has no effect on existing MAC address filters.

 

Enter how long (1-2147483647 seconds) the MAC address filter remains in

 

the Switch after the Switch identifies an unauthorized ARP packet. The

 

Switch automatically deletes the MAC address filter afterwards. Enter 0 if

 

you want the MAC address filter to be permanent.

 

 

Log Profile

 

 

 

Log buffer size

Enter the maximum number (1-1024) of log messages that were generated

 

by ARP packets and have not been sent to the syslog server yet. Make

 

sure this number is appropriate for the specified Syslog rate and Log

 

interval.

 

If the number of log messages in the Switch exceeds this number, the

 

Switch stops recording log messages and simply starts counting the

 

number of entries that were dropped due to unavailable buffer. Click

 

Clearing log status table in the ARP Inspection Log Status screen to

 

clear the log and reset this counter. See Section 21.4.1 on page 163.

 

 

 

165

ES-2024 Series User’s Guide