ip dhcp snooping arp-inspection validate
Use this command to enable validation of the source-mac, destination-mac, or IP address field in the ARP packet payload.
Note: The IP address in a payload is validated for not being a broadcast address, a reserved zero IP address, and multicast address.
Use the no form of this command to disable validation of the source-mac, destination-mac, or IP address field in the ARP packet payload
Command Syntax
ip dhcp snooping arp-inspection validate (dst-mac | ip | src-mac) bridge <1-32>
no ip dhcp snooping arp-inspection validate (dst-mac | ip | src-mac) bridge <1-32>
Parameters
dst-mac
Destination MAC validation
ip
ARP IP address validation
src-mac
Source MAC validation
<1-32>
Bridge number
Default
None
Command Mode
Configure mode
Applicability
This command was introduced in OcNOS version 5.0.
Examples
configure terminal
(config)# bridge 1 protocol mstp
(config)#ip dhcp snooping bridge 1
(config)#ip dhcp snooping arp-inspection bridge 1
(config)#ip dhcp snooping arp-inspection validate dst-mac bridge 1
(config)#no ip dhcp snooping arp-inspection validate dst-mac bridge 1
(config)#ip dhcp snooping arp-inspection validate src-mac bridge 1
(config)#no ip dhcp snooping arp-inspection validate src-mac bridge 1
(config)#ip dhcp snooping arp-inspection validate ip bridge 1
(config)#no ip dhcp snooping arp-inspection validate ip bridge 1
Last modified date: 10/19/2023