Ip Arp Inspection Validate - Cisco Catalyst 3750 Metro Command Reference Manual

Chapter 2 Catalyst 3750 Metro Switch Cisco IOS Commands
Usage Guidelines You must specify at least one of the keywords. Each command overrides the configuration of the
previous command; that is, if a command enables src-mac and dst-mac validations, and a second
command enables IP validation only, the src-mac and dst-mac validations are disabled as a result of the
second command.
The allow-zeros keyword interacts with ARP access control lists (ACLs) in this way:
•
•
The no form of the command disables only the specified checks. If none of the options are enabled, all
checks are disabled.
Examples
This example show how to enable source MAC validation:
Switch(config)# ip arp inspection validate src-mac
You can verify your setting by entering the show ip arp inspection vlan vlan-range privileged EXEC
command.
Related Commands Command
show ip arp inspection
vlan vlan-range
OL-9645-10
If you configure an ARP ACL to deny ARP probes, they are dropped even if the allow-zero keyword
is specified.
If you configure an ARP ACL that specifically permits ARP probes and configure the ip arp
inspection validate ip command, ARP probes are dropped unless you enter the allow-zeros
keyword.
Description
Displays the configuration and the operating state of dynamic ARP
inspection for the specified VLAN.
Catalyst 3750 Metro Switch Command Reference

ip arp inspection validate

2-141