Ip Arp Inspection Vlan - Cisco Catalyst 4500 Series Configuration Manual

Chapter 2

ip arp inspection vlan

To enable dynamic ARP inspection (DAI) on a per-VLAN basis, use the ip arp inspection vlan
command. To disable DAI, use the no form of this command.
Syntax Description
vlan-range
Command Default ARP inspection is disabled on all VLANs.
Command Modes Global configuration mode
Command History Release
12.1(19)EW
Usage Guidelines You must specify on which VLANs to enable DAI. DAI may not function on the configured VLANs if
they have not been created or if they are private.
Examples The following example shows how to enable DAI on VLAN 1:
Switch# configure terminal
Switch(config)# ip arp inspection vlan 1
Switch(config)# end
Switch# show ip arp inspection vlan 1
Source Mac Validation
Destination Mac Validation : Disabled
IP Address Validation
Vlan
----
Vlan
----
Switch#
The following example shows how to disable DAI on VLAN 1:
Switch# configure terminal
Switch(config)# no ip arp inspection vlan 1
Switch(config)#
ip arp inspection vlan vlan-range
no ip arp inspection vlan vlan-range
VLAN number or range; valid values are from 1 to 4094.
Modification
This command was introduced on the Catalyst 4500 series switch.
Configuration Operation
-------------
1 Enabled
ACL Logging DHCP Logging
-----------
1 Deny
Catalyst 4500 Series Switch Cisco IOS Command Reference—Release XE 3.9.xE and 15.2(5)Ex
: Disabled
: Disabled
ACL Match
--------- ---------
Active
------------
Deny
ip arp inspection vlan
Static ACL
----------
2-311