Cisco WS-SUP32-GE-3B - Supervisor Engine 32 Software Configuration Manual page 521

Chapter 35 Configuring Dynamic ARP Inspection
SwitchA# configure terminal
Enter configuration commands, one per line.
SwitchA(config)# ip arp inspection vlan 1
SwitchA(config)# end
SwitchA# show ip arp inspection vlan 1
Source Mac Validation
Destination Mac Validation : Disabled
IP Address Validation
Vlan
----
1
Vlan
----
1
SwitchA#
Step 3 Configure Fast Ethernet port 6/3 as trusted:
SwitchA# configure terminal
Enter configuration commands, one per line.
SwitchA(config)# interface fastethernet 6/3
SwitchA(config-if)# ip arp inspection trust
SwitchA(config-if)# end
SwitchA# show ip arp inspection interfaces fastethernet 6/3
Interface
---------------
Fa6/3
SwitchA#
Verify the bindings:
Step 4
SwitchA# show ip dhcp snooping binding
MacAddress
------------------
00:02:00:02:00:02
SwitchA#
Check the statistics before and after DAI processes any packets:
Step 5
SwitchA# show ip arp inspection statistics vlan 1
Vlan
----
1
Vlan
----
1
Vlan
----
1
SwitchA#
OL-11439-03
: Disabled
: Disabled
Configuration Operation
------------- ---------
Enabled Active
ACL Logging DHCP Logging
----------- ------------
Deny Deny
Trust State
-----------
Trusted
IpAddress
---------------
1.1.1.2
Forwarded Dropped
--------- -------
0
DHCP Permits ACL Permits
------------ -----------
0
Dest MAC Failures IP Validation Failures
----------------- ----------------------
0
Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY
End with CNTL/Z.
ACL Match
---------
End with CNTL/Z.
Rate (pps)
----------
None
Lease(sec) Type
---------- -------------
4993 dhcp-snooping
DHCP Drops ACL Drops
---------- ----------
0 0
Source MAC Failures
-------------------
0 0
0
DAI Configuration Samples
Static ACL
----------
VLAN Interface
---- --------------------
1 FastEthernet6/4
0
35-17