ip

interface-config-port-channel-instance

Configures ARP and DHCP related security parameters on this port-channel interface

Supported in the following platforms:

Syntax

ip [arp|dhcp]
ip arp [header-mismatch-validation|trust]
ip dhcp trust

Parameters

ip arp [header-mismatch-validation|trust]
ip arp [header-mismatch-validation| trust] Configures ARP related parameters on this port-channel interface
  • header-mismatch-validation – Enables a source MAC mismatch check in both the ARP and ethernet headers. This option is enabled by default.
  • trust – Enables ARP trust on this port channel. If enabled, ARP packets received on this port are considered trusted, and information from these packets is used to identify rogue devices. This option is disabled by default.
 
ip dhcp trust
ip dhcp trust Enables DHCP trust. If enabled, only DHCP responses are trusted and forwarded on this port channel, and a DHCP server can be connected only to a DHCP trusted port. This option is enabled by default.

Example

nx9500-6C8809(config-profile-testNX9000-if-port-channel1)#ip arp trust

nx9500-6C8809(config-profile-testNX9000-if-port-channel1)#show context
 interface port-channel1
  description "This port-channel is for enabling dynamic LACP."
  duplex full
  ip arp trust
nx9500-6C8809(config-profile-testNX9000-if-port-channel1)#

Related Commands

no Removes or reverts to default the ARP and DHCP security parameters configured
9037762-01 Rev AA