Ip Arp-Inspection Verify Dst-Mac; Ip Arp-Inspection Verify Ip - Hirschmann Hios-3S Rsp Referenzhandbuch

Dynamic ARP Inspection

12.1.2 ip arp-inspection verify dst-mac

If enabled verifies the destination MAC address in the (unicast) ethernet
packet against the MAC address in a ARP response packet body. If disabled
does not perform this additional security check.

Mode: Global Config Mode

Privilege Level: Operator

Format: ip arp-inspection verify dst-mac

no ip arp-inspection verify dst-mac
Disable the option

Mode: Global Config Mode

Privilege Level: Operator

Format: no ip arp-inspection verify dst-mac

12.1.3 ip arp-inspection verify ip

If enabled validates the sender protocol address (always) and the target pro-
tocol address (response) in the ARP packet body to be a public unicast IP
address. Such addresses exclude 0.0.0.0, multicast/broadcast addresses,
reserved addresses and loopback addresses. If disabled does not perform
this additional security check.

Mode: Global Config Mode

Privilege Level: Operator

Format: ip arp-inspection verify ip

no ip arp-inspection verify ip
Disable the option

Mode: Global Config Mode

Privilege Level: Operator

Format: no ip arp-inspection verify ip
RM CLI HiOS-3S RSP
Release 6.1 09/2016
12.1 ip
201