show ip arp inspection statistics
Use this command to display the statitstics of the ARP packets processed by Dynamic ARP
Inspection. Give the vlan-list argument and the command displays the statistics on all DAI-enabled
VLANs in that list. Give the single vlan argument and the command displays the statistics on that
VLAN. If no argument is included, the command lists a summary of the forwarded and dropped
ARP packets.
Format
show ip arp inspection statistics [vlan vlan-list]
Mode
• Privileged EXEC
• User EXEC
Term
Definition
VLAN
The VLAN ID for each displayed row.
Forwarded
The total number of valid ARP packets forwarded in this VLAN.
Dropped
The total number of not valid ARP packets dropped in this VLAN.
DHCP Drops
The number of packets dropped due to DHCP snooping binding database match failure.
ACL Drops
The number of packets dropped due to ARP ACL rule match failure.
DHCP Permits
The number of packets permitted due to DHCP snooping binding database match.
ACL Permits
The number of packets permitted due to ARP ACL rule match.
Bad Src MAC
The number of packets dropped due to Source MAC validation failure.
Bad Dest MAC
The number of packets dropped due to Destination MAC validation failure.
Invalid IP
The number of packets dropped due to invalid IP checks.
Example: The following shows example CLI display output for the command show ip arp inspection
statistics which lists the summary of forwarded and dropped ARP packets on all DAI-enabled VLANs.
VLAN
Forwarded
Dropped
----
---------
-------
10
90
20
10
Example: The following shows example CLI display output for the command show ip arp inspection
statistics vlan <vlan-list>.
VLAN
DHCP
Drops
Drops
----- -------- --------- ----------- --------- ---------- ----------- ---------
Switching Commands
14
3
ACL
DHCP
Permits
v1.0, July 2009
Managed Switch CLI Manual, Release 8.0
ACL
Bad Src
Permits
MAC
Bad Dest
Invalid
MAC
IP
3-137