Enterasys Enterasys SecureStack B2 B2G124-24 Especificaciones Pagina 516

  • Descarga
  • Añadir a mis manuales
  • Imprimir
  • Pagina
    / 600
  • Tabla de contenidos
  • MARCADORES
  • Valorado. / 5. Basado en revisión del cliente
Vista de pagina 515
set arpinspection filter
18-24 DHCP Snooping and Dynamic ARP Inspection
set arpinspection filter
UsethiscommandtocreateanARPACLandthentoassignanACLtoaVLAN,optionallyasa
staticmapping.
Syntax
set arpinspection filter name {permit ip host sender-ipaddr mac host
sender-macaddr | vlan vlan-range [static]}
Parameters
Defaults
None.
Mode
Switchcommand,readwrite.
Usage
ARPACLsareusedtodefinestaticmappingsforDAI.ARPACLsarecompletelyindependentof
ACLsusedforQoS.Amaximumof100ARPACLscanbeconfigured.WithinanACL,a
maximumof20rulescanbeconfigured.
AstaticmappingassociatesanIPaddresstoaMACaddress
onaVLAN.DAIconsultsitsstatic
mappingsbeforeitconsultstheDHCP snoopingbindingsdatabasethus,staticmappingshave
precedenceoverDHCP snoopingbindings.
Example
ThisexamplecreatesanACLnamedstaticARPandcreatesapermitruleforIPaddress
192.168.1.10.Then,theACLisassignedtoaVLANasastaticmapping.
B2(su)->set arpinspection filter staticARP permit ip host 192.168.1.10 mac host
00:01:22:33:44:55
B2(su)->set arpinspection filter staticARP vlan 10 static
show arpinspection access-list
UsethiscommandtodisplayARPaccesslistconfigurationinformation.
Syntax
show arpinspection access-list [acl-name]
name Specifiesthe nameoftheARPACL.
permit Specifiesthatapermitruleisbeingcreated.
iphostsenderipaddr SpecifiestheIPaddressintherulebeingcreated.
machost
sendermacaddr
SpecifiestheMACaddressintherulebeingcreated.
vlanvlanrange SpecifiestheVLANorVLANstowhichthisARP
ACLisassigned.
static (Optional)SpecifiesthatthisARPACLconfiguresstaticmappingsfor
theVLANorVLANs.
Vista de pagina 515
1 2 ... 511 512 513 514 515 516 517 518 519 520 521 ... 599 600

Comentarios a estos manuales

Sin comentarios