Cisco ASR 9000 Series

bridge group MyGroup
bridge-domain MyDomain
interface gigabitEthernet 0/1/0/0.1
dynamic-arp-inspection logging
This example shows how to configure optional dynamic ARP inspection under a bridge domain:
l2vpn
bridge group SECURE
bridge-domain SECURE-DAI
dynamic-arp-inspection
logging
address-validation
src-mac
dst-mac
ipv4
This example shows how to configure optional dynamic ARP inspection under a bridge port:
l2vpn
bridge group SECURE
bridge-domain SECURE-DAI
interface GigabitEthernet0/0/0/1.10
dynamic-arp-inspection
logging
address-validation
src-mac
dst-mac
ipv4
This example shows the output of the show l2vpn bridge-domain bd-name SECURE-DAI detail command:
#show l2vpn bridge-domain bd-name SECURE-DAI detail
Bridge group: SECURE, bridge-domain: SECURE-DAI, id: 2, state: up,
…
Dynamic ARP Inspection: enabled, Logging: enabled
Dynamic ARP Inspection Address Validation:
IPv4 verification: enabled
Source MAC verification: enabled
Destination MAC verification: enabled
…
List of ACs:
AC: GigabitEthernet0/0/0/1.10, state is up
…
Dynamic ARP Inspection: enabled, Logging: enabled
Dynamic ARP Inspection Address Validation:
IPv4 verification: enabled
Source MAC verification: enabled
Destination MAC verification: enabled
IP Source Guard: enabled, Logging: enabled
…
Dynamic ARP inspection drop counters:
packets: 1000, bytes: 64000
This example shows the output of the show l2vpn forwarding interface interface-name detail location
location-name command:
#show l2vpn forwarding interface g0/0/0/1.10 det location 0/0/CPU0
Local interface: GigabitEthernet0/0/0/1.10, Xconnect id: 0x40001, Status: up
…
Dynamic ARP Inspection: enabled, Logging: enabled
Dynamic ARP Inspection Address Validation:
IPv4 verification: enabled
Source MAC verification: enabled
L2VPN and Ethernet Services Configuration Guide for Cisco ASR 9000 Series Routers, IOS XR Release 6.3.x
341
Implementing Multipoint Layer 2 Services
Configuring Dynamic ARP Inspection: Example