User's Manual

Table Of Contents
307
Users Manual of CS-6306R
Setting an Interface to an ARP-Trusting Interface
ARP monitoring is not enabled on those trusted interfaces. The interfaces are distrusted ones by default.
Run the following commands in interface configuration mode.
Command Purpose
arp inspection trust
Sets an interface to an ARP-trusting
interface.
no arp inspection trust
Resumes an interface to an ARP-distrusting
interface.
Enabling Source IP Address Monitoring in a VLAN
After source IP address monitoring is enabled in a VLAN, IP packets received from all physical ports in the
VLAN will be rejected if their source MAC addresses and source IP addresses do not match up with the
configured MAC-to-IP binding relationship. The binding relationship on an interface can be dynamically bound
by DHCP or configured manually. If no MAC addresses are bound to IP addresses on a physical interface, the
switch rejects forwarding all IP packets received from the physical interface.
Run the following commands in global configuration mode.
Command Purpose
ip verify source vlan vlanid
Enables source IP address checkup on all
distrusted interfaces in a VLAN.
no ip verify source vlan vlanid
Disables source IP address checkup on all
interfaces in a VLAN.
If the DHCP packet (also the IP packet) is received, it will be forwarded because
global snooping is configured.
Setting an Interface to the One Which is Trusted by IP Source Address Monitoring
Source address checkup is not enabled on an interface if the interface has a trusted source IP address.
Run the following commands in interface configuration mode.
Command Purpose
ip-source trust Sets an interface to the one with a trusted
source IP address.
no Ip-source trust Resumes an interface to the one with a
distrusted source IP address.
Configuring the TFTP Server for Backing up Interface Binding
After the switch configuration is rebooted, the previously-configured interface binding will be lost. In this case,