Ip Arp Inspection Vlan - Cisco 4500M Command Reference Manual

ip arp inspection vlan

ip arp inspection vlan
To enable dynamic ARP inspection (DAI) on a per-VLAN basis, use the ip arp inspection vlan
command. Use the no form of this command to disable DAI.
Syntax Description
vlan-range
Defaults
ARP inspection is disabled on all VLANs.
Command Modes
Configuration
Command History Release
12.1(19)EW
Usage Guidelines
You must specify on which VLANs to enable DAI. DAI may not function on the configured VLANs if
they have not been created or if they are private.
Examples
This example shows how to enable DAI on VLAN 1:
Switch(config)# ip arp inspection vlan 1
Switch(config)# end
Switch# show ip arp inspection vlan 1
Source Mac Validation
Destination Mac Validation : Disabled
IP Address Validation
Vlan
----
Vlan
----
Switch#
Related Commands
arp access-list
show ip arp inspection
Catalyst4500 Series SwitchCiscoIOS Command Reference—Release 12.2(18)EW
2-120
ip arp inspection vlan vlan-range
no ip arp inspection vlan vlan-range
Specifies a VLAN number or range; valid values are from 1 to 4094.
Modification
Support for this command was introduced on the Catalyst 4500 series switch.
Configuration Operation
-------------
1 Enabled
ACL Logging DHCP Logging
-----------
1 Deny
Chapter2 Cisco IOS Commands for the Catalyst 4500 Series Switches
: Disabled
: Disabled
ACL Match
--------- ---------
Active
------------
Deny
Static ACL
----------
78-16201-01