Ip Arp Inspection Vlan Logging - Cisco Catalyst 4500 Series Command Reference Manual

Chapter 2 Cisco IOS Commands for the Catalyst 4500 Series Switches

ip arp inspection vlan logging

To control the type of packets that are logged, use the ip arp inspection vlan logging command. To
disable this logging control, use the no form of this command.
Syntax Description
vlan-range
acl-match
matchlog
none
dhcp-bindings
permit
all
none
Defaults All denied or dropped packets are logged.
Command Modes Global configuration mode
Command History Release
12.1(19)EW
Usage Guidelines The acl-match and dhcp-bindings keywords merge with each other. When you set an ACL match
configuration, the DHCP bindings configuration is not disabled. You can use the no form of this
command to reset some of the logging criteria to their defaults. If you do not specify either option, all
the logging types are reset to log on when the ARP packets are denied. The two options that are available
to you are as follows:
•
•
OL-27596 -01
ip arp inspection vlan vlan-range logging {acl-match {matchlog | none} | dhcp-bindings
{permit | all | none}}
no ip arp inspection vlan vlan-range logging {acl-match | dhcp-bindings}
Number of the VLANs to be mapped to the specified instance. The number is
entered as a single value or a range; valid values are from 1 to 4094.
Specifies the logging criteria for packets that are dropped or permitted based on
ACL matches.
Specifies that logging of packets matched against ACLs is controlled by the
matchlog keyword in the permit and deny access control entries of the ACL.
By default, the matchlog keyword is not available on the ACEs. When the
Note
keyword is used, denied packets are not logged. Packets are logged only
when they match against an ACE that has the matchlog keyword.
Specifies that ACL-matched packets are not logged.
Specifies the logging criteria for packets dropped or permitted based on matches
against the DHCP bindings.
Specifies logging when permitted by DHCP bindings.
Specifies logging when permitted or denied by DHCP bindings.
Prevents all logging of packets permitted or denied by DHCP bindings.
Modification
Support for this command was introduced on the Catalyst 4500 series switch.
acl-match—Logging on ACL matches is reset to log on deny
dhcp-bindings—Logging on DHCP binding compared is reset to log on deny
Catalyst 4500 Series Switch Cisco IOS Command Reference—Release IOS XE 3.4.0SG and IOS 15.1(2)SG)
ip arp inspection vlan logging
2-305