Ip Arp Inspection Validate - Cisco Catalyst 4500 Series Command Reference Manual

Chapter 2 Cisco IOS Commands for the Catalyst 4500 Series Switches

ip arp inspection validate

To perform specific checks for ARP inspection, use the ip arp inspection validate command. To disable
checks, use the no form of this command.
Syntax Description
src-mac
dst-mac
ip
Defaults
Checks are disabled.
Command Modes
Global configuration mode
Command History Release
12.1(19)EW
Usage Guidelines
When enabling the checks, specify at least one of the keywords (src-mac, dst-mac, and ip) on the
command line. Each command overrides the configuration of the previous command. If a command
enables src and dst mac validations, and a second command enables IP validation only, the src and dst
mac validations are disabled as a result of the second command.
The no form of this command disables only the specified checks. If none of the check options are
enabled, all the checks are disabled.
OL-25342 -01
ip arp inspection validate [src-mac] [dst-mac] [ip]
no ip arp inspection validate [src-mac] [dst-mac] [ip]
(Optional) Checks the source MAC address in the Ethernet header against the sender's
MAC address in the ARP body. This checking is done against both ARP requests and
responses.
Note When src-mac is enabled, packets with different MAC addresses are classified
as invalid and are dropped.
(Optional) Checks the destination MAC address in the Ethernet header against the
target MAC address in ARP body. This checking is done for ARP responses.
Note When dst-mac is enabled, the packets with different MAC addresses are
classified as invalid and are dropped.
(Optional) Checks the ARP body for invalid and unexpected IP addresses. Addresses
include 0.0.0.0, 255.255.255.255, and all IP multicast addresses.
The sender IP addresses are checked in all ARP requests and responses and target IP
addresses are checked only in ARP responses.
Modification
Support for this command was introduced on the Catalyst 4500 series switch.
Catalyst 4500 Series Switch Cisco IOS Command Reference—Release IOS XE 3.3.0SG and IOS 15.1(1)SG)
ip arp inspection validate
2-283