Specifications

2-235
Catalyst 4500 Se ries S wit ch C is co IO S C om mand R efer ence —Re lease I OS XE 3 .3.0 XO(1 5.1 (1)XO)
OL_28738 -01
Chapter 2 Cisco IOS Commands for the Catalyst 4500 Series Switches
ip arp inspection vlan
ip arp inspect ion vlan
To enable dynamic ARP inspection (DAI) on a per-VL AN basis, use the ip arp inspe ction vlan
command. To disable DAI, use the no form of this command.
ip arp inspection vlan v lan-range
no ip arp inspection vlan vlan-range
Syntax Description
Defaults ARP inspection is disabled on all VLANs.
Command Modes Global configura tion mode
Usage Guidelines You must specify on which VLANs to enable DAI. DAI may not f unction on the configur ed VLANs if
they have not been created or if they a re private.
Examples This example shows how to enable DAI on VLAN 1:
Switch# configure terminal
Switch(config)# ip arp inspection vlan 1
Switch(config)# end
Switch# show ip arp inspection vlan 1
Source Mac Validation : Disabled
Destination Mac Validation : Disabled
IP Address Validation : Disabled
Vlan Configuration Operation ACL Match Static ACL
---- ------------- --------- --------- ----------
1 Enabled Active
Vlan ACL Logging DHCP Logging
---- ----------- ------------
1 Deny Deny
Switch#
This example shows how to disable DAI on VLAN 1:
Switch# configure terminal
Switch(config)# no ip arp inspection vlan 1
Switch(config)#
vlan-range VLAN number or range ; valid values are fro m 1 to 4094.