Access Security Guide K/KA/KB.15.15

Displaying ARP Packet Statistics
To display statistics about forwarded ARP packets, dropped ARP packets, MAC validation failure,
and IP validation failures, enter the show arp-protect statistics <vid-range>command:
Figure 264 Show arp-protect statistics Command
Monitoring Dynamic ARP Protection
When dynamic ARP protection is enabled, you can monitor and troubleshoot the validation of ARP
packets with the debug arp-protect command. Use this command when you want to debug the
following conditions:
The switch is dropping valid ARP packets that should be allowed.
The switch is allowing invalid ARP packets that should be dropped.
Figure 265 Debug arp-protect command
Listing authorized and detected MAC addresses
Syntax:
show mac-address [ port-list | mac-address | vlan vid]
Without an optional parameter, show mac-address lists the authorized MAC
addresses that the switch detects on all ports.
mac-address
Lists the specified MAC address with the port on which it is detected as an authorized
address.
port list
Lists the authorized MAC addresses detected on the specified port(s).
Viewing 367