HP
HPE7-A06 · Question #101
The customer wants to configure ARP inspection on VLAN 6 port 1/1/2 but not on port 1/1/1. What are the correct commands to establish this? A. B. C. D.
The correct answer is D. interface vlan 6 arp inspection interface 1/1/1 vlan 6 arp inspection trust interface 1/1/2 vlan 6 arp inspection untrust. arp inspection must be enabled under the VLAN. Port 1/1/1 is set as trusted, so ARP packets are not inspected. Port 1/1/2 is set as untrusted, so ARP packets are inspected.
Securing and Managing Campus Access Switching Environments
Question
The customer wants to configure ARP inspection on VLAN 6 port 1/1/2 but not on port 1/1/1. What are the correct commands to establish this? A. B. C. D.
Exhibits
Options
- Avlan 6 arp inspection interface 1/1/1 arp inspection trust interface 1/1/2 vlan access 6
- Bvlan 6 arp inspection interface vlan 6 arp inspection trust 1/1/1 arp inspection untrust 1/1/2
- Cinterface vlan 6 arp inspection interface 1/1/1 vlan access 6 interface 1/1/2 vlan access 6 arp inspection untrust
- Dinterface vlan 6 arp inspection interface 1/1/1 vlan 6 arp inspection trust interface 1/1/2 vlan 6 arp inspection untrust
How the community answered
(18 responses)- A11% (2)
- B6% (1)
- D83% (15)
Explanation
arp inspection must be enabled under the VLAN. Port 1/1/1 is set as trusted, so ARP packets are not inspected. Port 1/1/2 is set as untrusted, so ARP packets are inspected.
Topics
#dynamic ARP inspection#VLAN security#port-level DAI#trusted ports
Community Discussion
No community discussion yet for this question.