show antispoof port

Use this command to display anti-spoofing port configuration.

Syntax

show antispoof port [port-string] [-interesting]

Parameters

port-string (Optional) Specifies the port or port range to display
-interesting (Optional) Only display ports configured for anti-spoofing.

Defaults

If no option is specified, all ports display.

Mode

All command modes.

Examples

This example shows how to display anti-spoofing port configuration for port ge.2.5:

System(rw)->show antispoof port ge.2.5
Port      Type      DHCP MacV    ArpInsp     IpInsp Class Untrusted-Counter
--------  --------- ---- ----  ---------  --------- ----- -----------------
ge.2.5    Untrusted  dis  dis    enabled    enabled     2                 0
System(rw)->

This example shows how to display anti-spoofing port configuration for all ports configured for anti-spoofing:

System(rw)->show antispoof port -interesting
Port      Type      DHCP MacV    ArpInsp     IpInsp Class Untrusted-Counter
--------  --------- ---- ----  ---------  --------- ----- -----------------
ge.2.5    Untrusted  dis  dis    enabled    enabled     2                 0
ge.2.6    Untrusted  dis  dis    enabled    enabled     2                 0
ge.2.7    Untrusted  dis  dis    enabled    enabled     2                 0
ge.2.8    Untrusted  dis  dis    enabled    enabled     2                 0
System(rw)->

show antispoof port Output Display provides an explanation of the command output.

Click to expand in new window

show antispoof port Output Display

Output... What it displays...
Port The port for the displayed anti-spoofing configuration information.
Type DHCP snooping port type: trusted, bypass, or untrusted
DHCP DHCP snooping state: enabled (ena) or disabled (dis).
MacV DHCP MAC address Verification state: enabled (ena) or disabled (dis).
ArpInsp ARP inspection state: enabled (ena) or disabled (dis).
IpInsp IP address inspection state: enabled (ena) or disabled (dis).
Class Anti-spoofing class index value.
Untrusted-Counter Number of DHCP packets received on the port if port-mode is set to untrusted.