38-14
Cisco 7600 Series Router Cisco IOS Software Configuration Guide, Release 12.2SX
OL-4266-08
Chapter 38 Configuring Dynamic ARP Inspection
Configuring DAI
Configuring the DAI Logging System Messages
To configure the DAI logging system messages, perform this task:
When configuring the DAI logging system messages, note the following information:
• For logs number_of_messages (default is 5), the range is 0 to 1024. A 0 value means that the entry
is placed in the log buffer, but a system message is not generated.
• For interval length_in_seconds (default is 1), the range is 0 to 86400 seconds (1 day). A 0 value
means that a system message is immediately generated (and the log buffer is always empty). An
interval setting of 0 overrides a log setting of 0.
• System messages are sent at the rate of number_of_messages per length_in_seconds.
This example shows how to configure DAI logging to send 12 messages every 2 seconds:
Router# configure terminal
Enter configuration commands, one per line. End with CNTL/Z.
Router(config)# ip arp inspection log-buffer logs 12 interval 2
Router(config)# do show ip arp inspection log | include Syslog
Syslog rate : 12 entries per 2 seconds.
This example shows how to configure DAI logging to send 20 messages every 60 seconds.
Router# configure terminal
Enter configuration commands, one per line. End with CNTL/Z.
Router(config)# ip arp inspection log-buffer logs 20 interval 60
Router(config)# do show ip arp inspection log | include Syslog
Syslog rate : 20 entries per 60 seconds.
Configuring DAI Log Filtering
To configure DAI log filtering, perform this task:
Command Purpose
Step 1
Router# configure terminal
Enters global configuration mode.
Step 2
Router(config)# ip arp inspection log-buffer logs
number_of_messages
interval
length_in_seconds
Configures the DAI logging buffer.
Router(config)# no ip arp inspection log-buffer
logs
Reverts to the default system message configuration.
Step 3
Router(config)# do show ip arp inspection log
Verifies the configuration.
Command Purpose
Step 1
Router# configure terminal
Enters global configuration mode.
Step 2
Router(config)# ip arp inspection vlan
vlan_range
logging {acl-match {matchlog | none} |
dhcp-bindings {all | none | permit}}
Configures log filtering for each VLAN.
Step 3
Router(config)# do show running-config | include
ip arp inspection vlan
vlan_range
Verifies the configuration.