User's Manual

Table Of Contents
351
Users Manual of CS-6306R
35.1.1.5 Setting an Interface to an ARP-Trusting Interface
ARP monitoring is not enabled on those trusted interfaces. The interfaces are distrusted ones by default.
Run the following commands in interface configuration mode.
Command Purpose
arp inspection trust
Sets an interface to an ARP-trusting
interface.
no arp inspection trust
Resumes an interface to an
ARP-distrusting interface.
35.1.1.6 Enabling Source IP Address Monitoring in a VLAN
After source IP address monitoring is enabled in a VLAN, IP packets received from all physical ports in the
VLAN will be rejected if their source MAC addresses and source IP addresses do not match up with the
configured MAC-to-IP binding relationship. The binding relationship on an interface can be dynamically bound
by DHCP or configured manually. If no MAC addresses are bound to IP addresses on a physical interface, the
switch rejects forwarding all IP packets received from the physical interface.
Run the following commands in global configuration mode.
Command Purpose
ip verify source vlan vlanid
Enables source IP address checkup on all distrusted interfaces in a
VLAN.
no ip verify source vlan
vlanid
Disables source IP address checkup on all interfaces in a VLAN.
If the DHCP packet (also the IP packet) is received, it will be forwarded because
global snooping is configured.
35.1.1.7 Setting an Interface to the One Which is Trusted by IP Source Address
Monitoring
Source address checkup is not enabled on an interface if the interface has a trusted source IP address.
Run the following commands in interface configuration mode.
Command Purpose
ip-source trust Sets an interface to the one with a trusted source IP
address.
no Ip-source trust Resumes an interface to the one with a distrusted source
IP address.