Chapter 26 IP Source Guard

26.6 ARP Inspection Status

Use this screen to look at the current list of MAC address filters that were created because the Switch identified an unauthorized ARP packet. When the Switch identifies an unauthorized ARP packet, it automatically creates a MAC address filter to block traffic from the source MAC address and source VLAN ID of the unauthorized ARP packet. To open this screen, click Advanced Application > IP Source Guard > ARP Inspection.

Figure 128 ARP Inspection Status

The following table describes the labels in this screen.

Table 83 ARP Inspection Status

LABEL

DESCRIPTION

Total number of

This field displays the current number of MAC address filters that were

filters

created because the Switch identified unauthorized ARP packets.

 

 

Index

This field displays a sequential number for each MAC address filter.

 

 

MAC Address

This field displays the source MAC address in the MAC address filter.

 

 

VID

This field displays the source VLAN ID in the MAC address filter.

 

 

Port

This field displays the source port of the discarded ARP packet.

 

 

Expiry (sec)

This field displays how long (in seconds) the MAC address filter

 

remains in the Switch. You can also delete the record manually

 

(Delete).

 

 

Reason

This field displays the reason the ARP packet was discarded.

 

MAC+VLAN: The MAC address and VLAN ID were not in the binding

 

table.

 

IP: The MAC address and VLAN ID were in the binding table, but the

 

IP address was not valid.

 

Port: The MAC address, VLAN ID, and IP address were in the binding

 

table, but the port number was not valid.

 

 

Delete

Select this and click Delete to remove the specified entry.

 

 

Delete

Click this to remove the selected entries.

 

 

Cancel

Click this to clear the Delete check boxes above.

 

 

276

 

XGS4700-48F User’s Guide