---------------------------------------------------------------------Internet 10.1.1.251 - 00:00:4d:57:f2:50 Te 1/2 Vl 10 CPInternet 10.1.1.252 - 00:00:4d:57:e6:f6 Te 1/1 Vl 10 CPInternet 10.1.1.253 - 00:00:4d:57:f8:e8 Te 1/3 Vl 10 CPInternet 10.1.1.254 - 00:00:4d:69:e8:f2 Te 1/5 Vl 10 CPDell#To see how many valid and invalid ARP packets have been processed, use the show arp inspectionstatistics command.Dell#show arp inspection statisticsDynamic ARP Inspection (DAI) Statistics---------------------------------------Valid ARP Requests : 0Valid ARP Replies : 1000Invalid ARP Requests : 1000Invalid ARP Replies : 0Dell#Bypassing the ARP InspectionYou can configure a port to skip ARP inspection by defining the interface as trusted, which is useful inmulti-switch environments.ARPs received on trusted ports bypass validation against the binding table. All ports are untrusted bydefault.To bypass the ARP inspection, use the following command.• Specify an interface as trusted so that ARPs are not validated against the binding table.INTERFACE modearp inspection-trustDell Networking OS Behavior: Introduced in Dell Networking OS version 8.2.1.0, DAI was available forLayer 3 only. However, Dell Networking OS version 8.2.1.1 extends DAI to Layer 2.Source Address ValidationUsing the DHCP binding table, Dell Networking OS can perform three types of source address validation(SAV).Table 13. Three Types of Source Address ValidationSource Address Validation DescriptionIP Source Address Validation Prevents IP spoofing by forwarding only IP packetsthat have been validated against the DHCP bindingtable.DHCP MAC Source Address Validation Verifies a DHCP packet’s source hardware addressmatches the client hardware address field(CHADDR) in the payload.IP+MAC Source Address Validation Verifies that the IP source address and MAC sourceaddress are a legitimate pair.266 Dynamic Host Configuration Protocol (DHCP)
