ARP Protect Events

The following are the events related to ARP Protect.

Event ID: 910

Message

Dynamic ARP Protection enabled.

Platforms

K, KA, KB, RA, WB, WC, YA, YB, YC

Category

ARP Protect

Severity

Information

Description

Indicates ARP Protection is enabled on the switch.

Event ID: 911

Message

Deny ARP OPERATION MAC-ADDR,<IP_ADDRESS> port <PORT_ID>- vlan <VLAN_ID>

Platforms

K, KA, KB, RA, WB, WC, YA, YB, YC

Category

ARP Protect

Severity

Information

Description

Indicates an ARP was dropped by the switch. This event is recognized by reception of an ARP request or reply with an IP-to-MAC binding that is not in the DHCP snooping binding table.

Event ID: 912

Message

Ceasing bad binding ARP logs for <TIME>

Platforms

K, KA, KB, RA, WB, WC, YA, YB, YC

Category

ARP Protect

Severity

Information

Description

More than one ARP packet with an IP-to-MAC binding that is not in the DHCP snooping binding table was received. To avoid filling the log file with repeated logs, denied ARP packets with bad bindings will not be logged for the TIME duration.

Event ID: 913

Message

Deny pkt, dest: <MAC_ADDR> target: <MAC_ADDRESS> mismatch port <PORT_ID>, vlan <VLAN_ID>

Platforms

K, KA, KB, RA, WB, WC, YA, YB, YC

Category

ARP Protect

Severity

Information

Description

Indicates an ARP packet was dropped by the switch because the destination MAC in the Ethernet header does not match the target MAC in the body of the packet. This event is recognized when the Dynamic ARP Protection destination MAC validation check is enabled and an ARP packet with unequal destination and target MAC addresses is received.

Event ID: 914

Message

Ceasing destination and target MAC address mismatch logs for <TIME>

Platforms

K, KA, KB, RA, WB, WC, YA, YB, YC

Category

ARP Protect

Severity

Information

Description

Indicates more than one ARP packet with mismatched destination and target MAC address were dropped. To avoid filling the log file with repeated logs, denied ARP with mismatched destination/target will not be logged for TIME duration.

Event ID: 915

Message

Deny pkt, source: <MAC_ADDRESS> sender: <MAC_ADDRESS> mismatch port <PORT_ID>, vlan <VLAN_ID>

Platforms

K, KA, KB, RA, WB, WC, YA, YB, YC

Category

ARP Protect

Severity

Information

Description

Indicates an ARP packet was dropped by the switch because the source MAC in the Ethernet header did not match the sender MAC in the body of the packet. This event is recognized when the Dynamic ARP Protection source MAC validation check is enabled and an ARP packet with unequal source and sender MAC addresses is received. an ARP packet was dropped by the switch because

Event ID: 916

Message

Ceasing source and sender MAC address mismatch logs for <TIME>

Platforms

K, KA, KB, RA, WB, WC, YA, YB, YC

Category

ARP Protect

Severity

Information

Description

Indicates more than one ARP packet with mismatched source and sender MAC address were dropped. To avoid filling the log file with repeated logs, denied ARP with mismatched source/sender will not be logged for TIME duration.

Event ID: 917

Message

Deny pkt, invalid IP <IP_ADDRESS> port <PORT_ID>, vlan <VLAN_ID>

Platforms

K, KA, KB, RA, WB, WC, YA, YB, YC

Category

ARP Protect

Severity

Information

Description

Indicates an ARP request packet was dropped by the switch because the sender IP address is invalid or an ARP reply packet was dropped because the target IP address is invalid. This event is recognized when the Dynamic ARP Protection IP validation check is enabled and an ARP packet is received with an invalid IP address such as 0.0.0.0, 255.255.255.255, all IP multicast addresses or

Event ID: 918

Message

Ceasing invalid IP target/sender logs for <TIME>

Platforms

K, KA, KB, RA, WB, WC, YA, YB, YC

Category

ARP Protect

Severity

Information

Description

Indicates more than one ARP packet with invalid IP address was dropped. To avoid filling the log file with repeated logs, denied ARP with invalid IP will not be logged for TIME duration.

Event ID: 919

Message

Deny malformed ARP pkt on port <PORT_ID>, vlan <VLAN_ID>

Platforms

K, KA, KB, RA, WB, WC, YA, YB, YC

Category

ARP Protect

Severity

Information

Description

Indicates an ARP packet was dropped by the switch because the packet was malformed.

Event ID: 920

Message

Ceasing malformed ARP pkt logs for <TIME>

Platforms

K, KA, KB, RA, WB, WC, YA, YB, YC

Category

ARP Protect

Severity

Information

Description

Indicates more than one malformed ARP packet were dropped. To avoid filling the log file with repeated logs, denied malformed ARP packets will not be logged for TIME duration.