Download SMC TigerAccess

Management Guide
TigerAccess™ EE
7.12.3.4
CLI
ARP Inspection on Trust Port
The ARP inspection defines 2 trust states, trusted and untrusted. Incoming packets via
trusted ports bypass the ARP inspection process, while those via untrusted ports go
through the ARP inspection process. Normally, the ports connected to subscribers are
configured as untrusted, while the ports connected to an upper network are configured as
trusted.
To set a trust state on a port for the ARP inspection, use the following command.
Command
Mode
ip arp inspection trust port
PORTS
no ip arp inspection trust port
Description
Sets a trust state on a port as trusted
Global
PORTS
PORTS: port number
Sets a trust state on a port as untrusted
PORTS: port number
To display a configured trust port of the ARP inspection, use the following command.
Command
Mode
show ip arp inspection trust
[port PORTS]
7.12.3.5
Description
Enable
Global
Shows a configured trust port of the ARP inspection.
Bridge
ARP Inspection Log-buffer
Log-buffer function shows the list of subscribers who have been used invalid fixed IP addresses. This function saves the information of users who are discarded by ARP inspection and generates periodic syslog messages.
Log-buffer function is automatically enabled with ARP inspection. If this switch receives
invalid or denied ARP packets by ARP inspection, it creates the table of entries that include the information of port number, VLAN ID, source IP address, source MAC address
and time. In addition, you can specify the maximum number of entries.
After one of entries is displayed as a syslog message, it is removed in the order in which
the entries appear in the list.
To configure the options of log-buffer function, use the following command.
Command
Mode
Description
ip arp inspection log-buffer
Specifies the number of entries in log-buffer.
entries <0-1024>
0-1024: the max. number of entries (default: 32)
Sets the interval for displaying syslog messages of
ip
arp
logs
86400>
inspection
<0-1024>
log-buffer
interval
<0-
Global
entries.
0-1024: the number of syslog messages per specified
interval (default: 5)
0-86400: interval value in second (default: 1 sec)
SMC7824M/VSW
219