User Manual
UMN:CLI
V8102
275
mac
|
dst-mac
|
ip
}
src-mac: source MAC address.
dst-mac: destination MAC address.
ip: source/destination IP address.
no ip arp inspection validate
{
src-mac
|
dst-mac
|
ip
}
Disables the ARP validation.
The
src-mac
,
dst-mac
, and
ip
options can be configured together.
8.1.4.4
ARP Inspection on Trust Port
The ARP inspection defines 2 trust states, trusted and untrusted. Incoming packets via
trusted ports bypass the ARP inspection process, while those via untrusted ports go
through the ARP inspection process. Normally, the ports connected to subscribers are
configured as untrusted, while the ports connected to an upper network are configured as
trusted.
To set a trust state on a port for the ARP inspection, use the following command.
Command
Mode
Description
ip arp inspection trust port
Interface
[GE/XE/GPON]
Sets a trust state on a port as trusted
no ip arp inspection trust port
Sets a trust state on a port as untrusted
To display a configured trust port of the ARP inspection, use the following command.
Command
Mode
Description
show ip arp inspection trust
Enable
Global
Shows a configured trust port of the ARP in-
spection.
show ip arp inspection trust interface
{
channelgroup
|
gpon
|
gigabitethernet
|
tengigabitethernet
}
PORTS
8.1.4.5
ARP Inspection Log-buffer
Log-buffer function shows the list of subscribers who have been used invalid fixed IP ad-
dresses. This function saves the information of users who are discarded by ARP inspec-
tion and generates periodic syslog messages.
Log-buffer function is automatically enabled with ARP inspection. If V8102 receives inva-
lid or denied ARP packets by ARP inspection, it creates the table of entries that include
the information of port number, VLAN ID, source IP address, source MAC address and
time. In addition, you can specify the maximum number of entries.
After one of entries is displayed as a syslog message, it is removed in the order in which
the entries appear in the list.
To configure the options of log-buffer function, use the following command.
i
