2-256
Catalyst 3750-X and 3560-X Switch Command Reference
OL-29704-01
Chapter 2 Catalyst 3750-X and 3560-X Switch Cisco IOS Commands
ip arp inspection validate
Usage Guidelines You must specify at least one of the keywords. Each command overrides the configuration of the
previous command; that is, if a command enables src-mac and dst-mac validations, and a second
command enables IP validation only, the src-mac and dst-mac validations are disabled as a result of the
second command.
The allow-zeros keyword interacts with ARP access control lists (ACLs) in this way:
• If you configure an ARP ACL to deny ARP probes, they are dropped even if the allow-zero keyword
is specified.
• If you configure an ARP ACL that specifically permits ARP probes and configure the ip arp
inspection validate ip command, ARP probes are dropped unless you enter the allow-zeros
keyword.
The no form of the command disables only the specified checks. If none of the options are enabled, all
checks are disabled.
Examples This example show how to enable source MAC validation:
Switch(config)# ip arp inspection validate src-mac
You can verify your setting by entering the show ip arp inspection vlan vlan-range privileged EXEC
command.
Related Commands Command Description
show inventory vlan
vlan-range
Displays the configuration and the operating state of dynamic ARP
inspection for the specified VLAN.