Syntax
ip arp inspection validate {[src-mac] [dst-mac] [ip]}
no ip arp inspection validate {[src-mac] [dst-mac] [ip]}
src-mac
•
For validating the source MAC address of an ARP packet.
—
•
dst-mac
For validating the destination MAC address of an ARP packet.
—
•
ip
For validating the IP address of an ARP packet.
—
Default Configuration
There is no additional validation enabled by default.
Command Mode
Global Configuration mode
User Guidelines
There are no user guidelines for this command
Example
console(config)#ip arp inspection validate src-mac dst-mac ip
console(config)#ip arp inspection validate src-mac ip
console(config)#ip arp inspection validate dst-mac ip
console(config)#ip arp inspection validate ip
ip arp inspection vlan
Use the ip arp inspection vlan command to enable Dynamic ARP Inspection on a single VLAN
or a range of VLANs. Use the "no" form of this command to disable Dynamic ARP Inspection
on a single VLAN or a range of VLANs.
Syntax
ip arp inspection vlan
no ip arp inspection vlan
vlan-range — A valid range of VLAN IDs.
•
•
logging — Use this parameter to enable logging of invalid packets.
Default Configuration
Dynamic ARP Inspection is disabled by default.
vlan-range
[ logging ]
vlan-range
[ logging ]
Dynamic ARP Inspection Commands
227