Enterprise

Community Forums Switches

arp inspection and ip source guard

Created: Dec 11, 2015 08:28:50Latest reply: Dec 11, 2015 09:40:45 1645 3 0 0

display all floors ^#1

Hi!

ive been asked to put in following commands in my accesswitch on every customer port:

dhcp snooping check arp enable alarm arp enable threshold 50

and

dhcp snooping check ip enable alarm ip enable threshold 50

i dont have these commands in my s5328 so i wonder what should i put in intead?

i found this commands, is this the same?

arp anti-attack check user-bind enable
arp anti-attack check user-bind alarm enable
arp anti-attack check user-bind alarm threshold 50

ip source check user-bind enable
ip source check user-bind alarm enable
ip source check user-bind alarm threshold threshold 50

x
convention：

Helpful (0) Favorite(0) Report

user_46175 Created Dec 11, 2015 09:32:27

you can try，to make arp and dhcp work together

arp dhcp-snooping-detect enable

x
convention：

who_knows Created Dec 11, 2015 09:37:01

Yes, you are right

x
convention：

mange8 Created Dec 11, 2015 09:40:45

so i should do this in global: arp dhcp-snooping-detect enable

and my commands above on every customer port?

x
convention：

Notice: To protect the legitimate rights and interests of you, the community, and third parties, do not release content that may bring legal risks to all parties, including but are not limited to the following:

Politically sensitive content
Content concerning pornography, gambling, and drug abuse
Content that may disclose or infringe upon others ' commercial secrets, intellectual properties, including trade marks, copyrights, and patents, and personal privacy

Do not share your account and password with others. All operations performed using your account will be regarded as your own actions and all consequences arising therefrom will be borne by you. For details, see " Privacy."

Enterprise

Consumer

Corporate

Carriers

arp inspection and ip source guard

Third Party’s Trade Secret