Ip Arp-Inspection Access-List Strict; Ip Arp-Inspection Access-List Assign - Hirschmann Hios-3S Rsp Referenzhandbuch

Dynamic ARP Inspection

12.3.4 ip arp-inspection access-list strict

Enables or disables the strict DAI ACL check on a VLAN. If an ARP ACL is
defined for the VLAN and there is no match for the received ARP packet, then
(if this option is enabled) the packet is dropped without consulting the DHCP
Snooping bindings database.

Mode: VLAN Database Mode

Privilege Level: Operator

Format: ip arp-inspection access-list strict <P-1>
Parameter Value
1..4042
P-1

no ip arp-inspection access-list strict
Disable the option

Mode: VLAN Database Mode

Privilege Level: Operator

Format: no ip arp-inspection access-list strict <P-1>

12.3.5 ip arp-inspection access-list assign

(Un) Configure the ARP ACL used to filter ARP packets on a VLAN. If the
ARP ACL name is omitted, then no ACL is assigned to this VLAN. If the ARP
ACL name does not exist in the ACL table, then it depends on the DHCP
Snooping bindings database and/or it's configured usage whether an ARP
packet is forwarded or dropped.

Mode: VLAN Database Mode

Privilege Level: Operator

Format: ip arp-inspection access-list assign <P-1> [<P-
2>]
Parameter Value
1..4042
P-1
string
P-2
208
Meaning
Enter the VLAN ID.
Meaning
Enter the VLAN ID.
<acl-name> Name of ACL.
12.3 ip
RM CLI HiOS-3S RSP
Release 6.1 09/2016