Cisco Catalyst 4500 Series Command Reference Guide

2-301
Catalyst 4500 Series Switch Cisco IOS Command Reference—Release IOS XE 3.4.0SG and IOS 15.1(2)SG)
OL-27596 -01
Chapter 2 Cisco IOS Commands for the Catalyst 4500 Series Switches
ip arp inspection validate
ip arp inspection validate
To perform specific checks for ARP inspection, use the ip arp inspection validate command. To disable
checks, use the no form of this command.
ip arp inspection validate [src-mac] [dst-mac] [ip]
no ip arp inspection validate [src-mac] [dst-mac] [ip]
Syntax Description
Defaults Checks are disabled.
Command Modes Global configuration mode
Command History
Usage Guidelines When enabling the checks, specify at least one of the keywords (src-mac, dst-mac, and ip) on the
command line. Each command overrides the configuration of the previous command. If a command
enables src and dst mac validations, and a second command enables IP validation only, the src and dst
mac validations are disabled as a result of the second command.
The no form of this command disables only the specified checks. If none of the check options are
enabled, all the checks are disabled.
src-mac (Optional) Checks the source MAC address in the Ethernet header against the sender’s
MAC address in the ARP body. This checking is done against both ARP requests and
responses.
Note When src-mac is enabled, packets with different MAC addresses are classified
as invalid and are dropped.
dst-mac (Optional) Checks the destination MAC address in the Ethernet header against the
target MAC address in ARP body. This checking is done for ARP responses.
Note When dst-mac is enabled, the packets with different MAC addresses are
classified as invalid and are dropped.
ip (Optional) Checks the ARP body for invalid and unexpected IP addresses. Addresses
include 0.0.0.0, 255.255.255.255, and all IP multicast addresses.
The sender IP addresses are checked in all ARP requests and responses and target IP
addresses are checked only in ARP responses.
Release Modification
12.1(19)EW Support for this command was introduced on the Catalyst 4500 series switch.

Cisco Catalyst 4500 Series Specifications

General

Series	Catalyst 4500 Series
Category	Switch
Layer Support	Layer 2, Layer 3
Form Factor	Modular chassis
Stackable	No
Chassis Slots	3, 6, 7, 10
Power Supply Options	AC, DC
Redundancy	Power supply, Supervisor engine
Network Management	Cisco IOS Software CLI, SNMP, Cisco Prime Infrastructure
Features	Security, QoS
Port Density	Up to 384 ports per chassis
Security Features	802.1X, ACLs, DHCP Snooping, Dynamic ARP Inspection, IP Source Guard
Supervisor Engine	8-E