Command Line Interface Guide

388 Dynamic ARP Inspection Commands
Syntax
ip arp inspection validate {[src-mac] [dst-mac] [ip]}
no ip arp inspection validate {[src-mac] [dst-mac] [ip]}
• src-mac — For validating the source MAC address of an ARP packet.
•
dst-mac — For validating the destination MAC address of an ARP packet.
•
ip — For validating the IP address of an ARP packet.
Default Configuration
There is no additional validation enabled by default.
Command Mode
Global Configuration mode
User Guidelines
There are no user guidelines for this command
Example
console(config)#ip arp inspection validate src-mac
dst-mac ip
console(config)#ip arp inspection validate src-mac ip
console(config)#ip arp inspection validate dst-mac ip
console(config)#ip arp inspection validate ip
ip arp inspection vlan
Use the ip arp inspection vlan command to enable Dynamic ARP Inspection
on a single VLAN or a range of VLANs. Use the no form of this command to
disable Dynamic ARP Inspection on a single VLAN or a range of VLANs.
Syntax
ip arp inspection vlan vlan-range [logging]
no ip arp inspection vlan
vlan-range [logging]
• vlan-range — A valid range of VLAN IDs.
2CSPC4.X8100-SWUM100.book Page 388 Wednesday, August 29, 2012 6:23 PM