Performing Validation Checks - Cisco Catalyst 4500 series Administration Manual

Chapter 52 Configuring Dynamic ARP Inspection
vmps
pagp-flap
dtp-flap
link-flap
l2ptguard
psecure-violation
gbic-invalid
dhcp-rate-limit
unicast-flood
storm-control
arp-inspection
Timer interval: 300 seconds
Interfaces that will be enabled at the next timeout:
SwitchB#
1w2d: %SW_DAI-4-PACKET_RATE_EXCEEDED: 101 packets received in 739 milliseconds on Gi3/31.
1w2d: %PM-4-ERR_DISABLE: arp-inspection error detected on Gi3/31, putting Gi3/31 in
err-disable state
SwitchB# show clock
*02:21:43.556 UTC Fri Feb 4 2005
SwitchB#
SwitchB# show interface g3/31 status
Port
Gi3/31
SwitchB#
SwitchB#
1w2d: %PM-4-ERR_RECOVER: Attempting to recover from arp-inspection err-disable state on
Gi3/31
SwitchB# show interface g3/31 status
Port
Gi3/31
SwitchB# show clock
*02:27:40.336 UTC Fri Feb 4 2005
SwitchB#

Performing Validation Checks

DAI intercepts, logs, and discards ARP packets with invalid IP-to-MAC address bindings. You can
configure the switch to perform additional checks on the destination MAC address, the sender and target
IP addresses, and the source MAC address.
OL_28731-01
Disabled
Disabled
Disabled
Disabled
Disabled
Disabled
Disabled
Disabled
Disabled
Disabled
Enabled
Name Status
err-disabled 100
Name Status
connected
Software Configuration Guide—Release IOS XE 3.6.0E and IOS 15.2(2)E
Configuring Dynamic ARP Inspection
Vlan Duplex Speed Type
auto auto 10/100/1000-TX
Vlan Duplex Speed Type
100 a-full a-100 10/100/1000-TX
52-19