2-120
Catalyst4500 Series SwitchCiscoIOS Command Reference—Release 12.2(18)EW
78-16201-01
Chapter2Cisco IOS Commands for the Catalyst 4500 Series Switches
ip arp inspection vlan
ip arp inspection vlan
To enable dynamic ARP inspection (DAI) on a per-VLAN basis, use the ip arp inspection vlan
command. Use the no form of this command to disable DAI.
ip arp inspection vlan vlan-range
no ip arp inspection vlan vlan-range
Syntax Description
Defaults ARP inspection is disabled on all VLANs.
Command Modes Configuration
Command History
Usage Guidelines You must specify on which VLANs to enable DAI. DAI may not function on the configured VLANs if
they have not been created or if they are private.
Examples This example shows how to enable DAI on VLAN 1:
Switch(config)# ip arp inspection vlan 1
Switch(config)# end
Switch# show ip arp inspection vlan 1
Source Mac Validation : Disabled
Destination Mac Validation : Disabled
IP Address Validation : Disabled
Vlan Configuration Operation ACL Match Static ACL
---- ------------- --------- --------- ----------
1 Enabled Active
Vlan ACL Logging DHCP Logging
---- ----------- ------------
1 Deny Deny
Switch#
Related Commands arp access-list
show ip arp inspection
vlan-range Specifies a VLAN number or range; valid values are from 1to 4094.
Release Modification
12.1(19)EW Support for this command was introduced on the Catalyst 4500 series switch.