Cisco Catalyst 3560-X Command Reference Manual page 263

Chapter 2 Catalyst 3750-X and 3560-X Switch Cisco IOS Commands
Usage Guidelines
Examples
Related Commands
OL-21522-02
Downloaded from www.Manualslib.com
You must specify at least one of the keywords. Each command overrides the configuration of the
previous command; that is, if a command enables src-mac and dst-mac validations, and a second
command enables IP validation only, the src-mac and dst-mac validations are disabled as a result of the
second command.
The allow-zeros keyword interacts with ARP access control lists (ACLs) in this way:
• If you configure an ARP ACL to deny ARP probes, they are dropped even if the allow-zero keyword
is specified.
• If you configure an ARP ACL that specifically permits ARP probes and configure the ip arp
inspection validate ip command, ARP probes are dropped unless you enter the allow-zeros
keyword.
The no form of the command disables only the specified checks. If none of the options are enabled, all
checks are disabled.
This example show how to enable source MAC validation:
Switch(config)# ip arp inspection validate src-mac
You can verify your setting by entering the show ip arp inspection vlan vlan-range privileged EXEC
command.
Command
show inventory vlan
vlan-range
manuals search engine
Description
Displays the configuration and the operating state of dynamic ARP
inspection for the specified VLAN.
Catalyst 3750-X and 3560-X Switch Command Reference
ip arp inspection validate
2-231