Cisco ASR 9000 Series Configuration Manuallines page 367

Implementing Multipoint Layer 2 Services
bridge group MyGroup
bridge-domain MyDomain
interface gigabitEthernet 0/1/0/0.1
dynamic-arp-inspection logging
This example shows how to configure optional dynamic ARP inspection under a bridge domain:
l2vpn
bridge group SECURE
bridge-domain SECURE-DAI
This example shows how to configure optional dynamic ARP inspection under a bridge port:
l2vpn
bridge group SECURE
bridge-domain SECURE-DAI
This example shows the output of the show l2vpn bridge-domain bd-name SECURE-DAI detail command:
#show l2vpn bridge-domain bd-name SECURE-DAI detail
Bridge group: SECURE, bridge-domain: SECURE-DAI, id: 2, state: up,
...
Dynamic ARP Inspection: enabled, Logging: enabled
Dynamic ARP Inspection Address Validation:
IPv4 verification: enabled
Source MAC verification: enabled
Destination MAC verification: enabled
...
List of ACs:
AC: GigabitEthernet0/0/0/1.10, state is up
...
Dynamic ARP Inspection: enabled, Logging: enabled
Dynamic ARP Inspection Address Validation:
...
Dynamic ARP inspection drop counters:
This example shows the output of the show l2vpn forwarding interface interface-name detail location
location-name command:
#show l2vpn forwarding interface g0/0/0/1.10 det location 0/0/CPU0
Local interface: GigabitEthernet0/0/0/1.10, Xconnect id: 0x40001, Status: up
...
Dynamic ARP Inspection: enabled, Logging: enabled
Dynamic ARP Inspection Address Validation:
L2VPN and Ethernet Services Configuration Guide for Cisco ASR 9000 Series Routers, IOS XR Release 6.3.x
dynamic-arp-inspection
logging
address-validation
src-mac
dst-mac
ipv4
interface GigabitEthernet0/0/0/1.10
dynamic-arp-inspection
logging
address-validation
src-mac
dst-mac
ipv4
IPv4 verification: enabled
Source MAC verification: enabled
Destination MAC verification: enabled
IP Source Guard: enabled, Logging: enabled
packets: 1000, bytes: 64000
IPv4 verification: enabled
Source MAC verification: enabled
Configuring Dynamic ARP Inspection: Example
341