Quick Reference Guide

352 Dynamic ARP Inspection Commands
Default Configuration
There is no default configuration for this command.
Command Mode
Privileged EXEC, Configuration mode and all Configuration submodes
User Guidelines
There are no user guidelines for this command.
Example
console#show arp access-list
ARP access list H2
permit ip host 1.1.1.1 mac host 00:01:02:03:04:05
permit ip host 1.1.1.2 mac host 00:03:04:05:06:07
ARP access list H3
ARP access list H4
permit ip host 2.1.1.2 mac host 00:03:04:05:06:08
show ip arp inspection
Use the show ip arp inspection command in Privileged EXEC mode to
display the Dynamic ARP Inspection and status.
Syntax
show ip arp inspection [interfaces [ interface-id ] | statistics [vlan vlan-range ]
| vlan
vlan-range ]
• interfaces [ interface-id ] — Display the Dynamic ARP Inspection configuration
on all the DAI enabled interfaces. Giving an interface argument, it displays the
values for that interface.
• statistics [vlan vlan-range ] — Display the statistics of the ARP packets processed
by Dynamic ARP Inspection. Given vlan-range argument, it displays the
statistics on all DAI-enabled VLANs in that range. In the case of no argument, it
lists the summary of the forwarded and dropped ARP packets.
• vlan vlan-range — Display the Dynamic ARP Inspection configuration on all the
VLANs in the given VLAN range. It also displays the global configuration values
for source MAC validation, destination MAC validation and invalid IP
validation.
2CSNXXX_SWUM200.book Page 352 Tuesday, December 10, 2013 1:22 PM