Administrator Guide

Layer 2 Switching Commands 386
• vlan vlan-range — Display the Dynamic ARP Inspection configuration on all the
VLANs in the given VLAN range. It also displays the global configuration values
for source MAC validation, destination MAC validation and invalid IP
validation.
List separate, non-consecutive VLAN IDs separated by commas
(without spaces). Use a hyphen to designate a range of IDs. (Range:
1–4093)
Default Configuration
There is no default configuration for this command.
Command Mode
Privileged Exec mode, Configuration mode and all Configuration submodes
User Guidelines
The following information is displayed for each VLAN when a VLAN range is
supplied:
Field Description
VLAN The VLAN-ID for each displayed row.
Forwarded The total number of valid ARP packets forwarded in this VLAN.
Dropped The total number of invalid ARP packets dropped in this VLAN.
DHCP Drops The number of packets dropped due to DHCP Snooping binding
database match failure.
ACL Drops The number of packets dropped due to ARP ACL rule match failure.
DHCP Permits The number of packets permitted due to DHCP snooping binding
database match.
ACL Permits The number of packets permitted due to ARP ACL rule match.
Bad Src MAC The number of packets dropped due to Source MAC validation
failure.
Bad Dest
MAC
The number of packets dropped due to Destination MAC validation
failure.
Invalid IP The number of packets dropped due to invalid IP checks.
2CSNXXX_SWUM204.book Page 386 Monday, January 25, 2016 1:25 PM