Specifications
ip arp inspection validate
224
ip arp inspection validate
Sets inspection items to be added to improve the accuracy of the dynamic ARP inspection
when the dynamic ARP inspection functionality is enabled on a Switch.
Syntax
To set or change information:
ip arp inspection validate [src-mac] [dst-mac] [ip]
To delete information:
no ip arp inspection validate
Input mode
(config)
Parameters
src-mac
This inspection item checks if the source MAC address and the sender MAC address
of received ARP packets are the same. This inspection is performed on both an ARP
request and an ARP reply.
1. Default value when this parameter is omitted:
The inspection that checks if the source MAC address and the sender MAC
address of the received ARP packet are the same is not performed.
2. Range of values:
None
dst-mac
This inspection item checks if the destination MAC address and the target MAC
address of the received ARP packets are the same. This inspection is performed on
an ARP reply.
1. Default value when this parameter is omitted:
The inspection for checking if the destination MAC address and the target
MAC address of the received ARP packet are the same is not performed.
2. Range of values:
None
ip
This inspection item checks if the target IP address of the received ARP packet is
within the following ranges.
1.0.0.0 to 126.255.255.255
128.0.0.0 to 223.255.255.255
This inspection is performed on an ARP reply.
1. Default value when this parameter is omitted:
The target IP address of the received ARP packet is not checked.
2. Range of values:
None