Enterasys Enterasys SecureStack B2 B2G124-24 Spécifications Page 516

  • Télécharger
  • Ajouter à mon manuel
  • Imprimer
  • Page
    / 600
  • Table des matières
  • MARQUE LIVRES
  • Noté. / 5. Basé sur avis des utilisateurs
Vue de la page 515
set arpinspection filter
18-24 DHCP Snooping and Dynamic ARP Inspection
set arpinspection filter
UsethiscommandtocreateanARPACLandthentoassignanACLtoaVLAN,optionallyasa
staticmapping.
Syntax
set arpinspection filter name {permit ip host sender-ipaddr mac host
sender-macaddr | vlan vlan-range [static]}
Parameters
Defaults
None.
Mode
Switchcommand,readwrite.
Usage
ARPACLsareusedtodefinestaticmappingsforDAI.ARPACLsarecompletelyindependentof
ACLsusedforQoS.Amaximumof100ARPACLscanbeconfigured.WithinanACL,a
maximumof20rulescanbeconfigured.
AstaticmappingassociatesanIPaddresstoaMACaddress
onaVLAN.DAIconsultsitsstatic
mappingsbeforeitconsultstheDHCP snoopingbindingsdatabasethus,staticmappingshave
precedenceoverDHCP snoopingbindings.
Example
ThisexamplecreatesanACLnamedstaticARPandcreatesapermitruleforIPaddress
192.168.1.10.Then,theACLisassignedtoaVLANasastaticmapping.
B2(su)->set arpinspection filter staticARP permit ip host 192.168.1.10 mac host
00:01:22:33:44:55
B2(su)->set arpinspection filter staticARP vlan 10 static
show arpinspection access-list
UsethiscommandtodisplayARPaccesslistconfigurationinformation.
Syntax
show arpinspection access-list [acl-name]
name Specifiesthe nameoftheARPACL.
permit Specifiesthatapermitruleisbeingcreated.
iphostsenderipaddr SpecifiestheIPaddressintherulebeingcreated.
machost
sendermacaddr
SpecifiestheMACaddressintherulebeingcreated.
vlanvlanrange SpecifiestheVLANorVLANstowhichthisARP
ACLisassigned.
static (Optional)SpecifiesthatthisARPACLconfiguresstaticmappingsfor
theVLANorVLANs.
Vue de la page 515
1 2 ... 511 512 513 514 515 516 517 518 519 520 521 ... 599 600

Commentaires sur ces manuels

Pas de commentaire