Ip Arp Inspection Validate - Cisco 4500M Command Reference Manual

ip arp inspection validate

ip arp inspection validate
To perform specific checks for ARP inspection, use the ip arp inspection validate command. Use the
no form of this command to disable the checks.
Syntax Description
src-mac
dst-mac
ip
Defaults
Checks are disabled.
Command Modes
Configuration
Command History Release
12.1(19)EW
Usage Guidelines
When enabling the checks, specify at least one of the keywords (src-mac, dst-mac, and ip) on the
command line. Each command overrides the configuration of the previous command; that is, if a
command enables src and dst mac validations, and a second command enables IP validation only, the
src and dst mac validations are disabled as a result of the second command.
The no form of the command disables only the specified checks. If none of the check options are
enabled, all checks are disabled.
Catalyst4500 Series SwitchCiscoIOS Command Reference—Release 12.2(18)EW
2-118
ip arp inspection validate [src-mac] [dst-mac] [ip]
no ip arp inspection validate [src-mac] [dst-mac] [ip]
(Optional) Checks the source MAC address in the Ethernet header against the sender's
MAC address in the ARP body. This checking is done against both ARP requests and
responses.
Note
When enabled, packets with different MAC addresses are classified as invalid
and are dropped.
(Optional) Checks the destination MAC address in the Ethernet header against the
target MAC address in ARP body. This checking is done for ARP responses.
Note
When enabled, packets with different MAC addresses are classified as invalid
and are dropped.
(Optional) Checks the ARP body for invalid and unexpected IP addresses. Addresses
include 0.0.0.0, 255.255.255.255, and all IP multicast addresses.
Sender IP addresses are checked in all ARP requests and responses and target IP
addresses are checked only in ARP responses.
Modification
Support for this command was introduced on the Catalyst 4500 series switch.
Chapter2 Cisco IOS Commands for the Catalyst 4500 Series Switches
78-16201-01