13
341
Parameters
N/A
Default Configuration
ARP inspection validation is disabled.
Command Mode
Global Configuration mode
User Guidelines
The following checks are performed:
•
Source MAC address: Compares the source MAC address in the Ethernet
header against the sender MAC address in the ARP body. This check is
performed on both ARP requests and responses.
•
Destination MAC address: Compares the destination MAC address in the
Ethernet header against the target MAC address in the ARP body. This
check is performed for ARP responses.
•
IP addresses: Compares the ARP body for invalid and unexpected IP
addresses. Addresses include 0.0.0.0, 255.255.255.255, and all IP multicast
addresses.
Example
The following example executes ARP inspection validation.
switchxxxxxx(config)#
13.23 ip arp inspection list create
Use the ip arp inspection list create Global Configuration mode command to
create a static ARP binding list and enters the ARP list configuration mode. Use the
no form of this command to delete the list.
Syntax
ip arp inspection list create
no ip arp inspection list create
ip arp inspection validate
name
name
Cisco Sx350 Ph. 2.2.5 Devices - Command Line Interface Reference Guide
DHCP Snooping Commands