Cisco 4500M Software Manual page 482

Configuring Dynamic ARP Inspection
Vlan
----
1
S1#
Establish the interface fa6/3 as untrusted, and verify the configuration:
Step 3
S1# conf t
Enter configuration commands, one per line.
S1(config)# in fa6/3
S1(config-if)# no ip arp inspection trust
S1(config-if)# end
Switch# show ip arp inspection interfaces fastEthernet 6/3
Interface
---------------
Fa6/3
Switch#
When H2 sends 5 ARP requests through interface fa6/3 on S1 and a "get" is permitted by S1, the
statistics are updated appropriately:
Switch# show ip arp inspection statistics vlan 1
Vlan
----
1
Vlan
----
1
Vlan
----
1
Switch#
Software Configuration Guide—Release 12.2(25)EW
34-10
ACL Logging DHCP Logging
----------- ------------
Deny Deny
Trust State
-----------
Untrusted
Forwarded Dropped
--------- -------
5
DHCP Permits ACL Permits
------------ -----------
0
Dest MAC Failures IP Validation Failures
----------------- ----------------------
0
Chapter 34 Understanding and Configuring Dynamic ARP Inspection
End with CNTL/Z.
Rate (pps)
----------
15
DHCP Drops ACL Drops
---------- ----------
0 0
Source MAC Failures
-------------------
5 0
0
0
OL-6696-01