Cisco IE 4000 Software Configuration Guide

415
Configuring Dynamic ARP Inspection
Monitoring and Maintaining Dynamic ARP Inspection
Monitoring and Maintaining Dynamic ARP Inspection
Configuration Examples for Dynamic ARP Inspection
Configuring Dynamic ARP Inspection in DHCP Environments: Example
This example shows how to configure DAI on Switch A in VLAN 1. You would perform a similar procedure on Switch B:
Switch(config)# ip arp inspection vlan 1
Switch(config)# interface GigabitEthernet1/17
Switch(config-if)# ip arp inspection trust
Configuring ARP ACLs for Non-DHCP Environments: Example
This example shows how to configure an ARP ACL called host2 on Switch A, to permit ARP packets from Host 2 (IP
address 1.1.1.1 and MAC address 0001.0001.0001), to apply the ACL to VLAN 1, and to configure port 1 on Switch A
as untrusted:
Switch(config)# arp access-list host2
Switch(config-arp-acl)# permit ip host 1.1.1.1 mac host 1.1.1
Switch(config-arp-acl)# exit
Switch(config)# ip arp inspection filter host2 vlan 1
Switch(config)# interface GigabitEthernet1/17
Switch(config-if)# no ip arp inspection trust
Additional References
The following sections provide references related to switch administration:
Command Description
clear ip arp inspection log Clears the DAI log buffer.
clear ip arp inspection statistics Clears the DAI statistics.
show arp access-list [acl-name] Displays detailed information about ARP ACLs.
show errdisable recovery Displays the error-disabled recovery timer information.
show ip arp inspection interfaces [interface-id] Displays the trust state and the rate limit of ARP packets for the specified
interface or all interfaces.
show ip arp inspection log Displays the configuration and contents of the DAI log buffer.
show ip arp inspection vlan vlan-range Displays the configuration and the operating state of DAI for the specified
VLAN. If no VLANs are specified or if a range is specified, displays
information only for VLANs with DAI enabled (active).
show ip arp inspection statistics [vlan
vlan-range]
Displays statistics for forwarded, dropped, MAC validation failure, IP
validation failure, ACL permitted and denied, and DHCP permitted and
denied packets for the specified VLAN. If no VLANs are specified or if a
range is specified, displays information only for VLANs with DAI enabled
(active).
show ip dhcp snooping binding Verifies the DHCP bindings.

Cisco IE 4000 Specifications

General

Product Type	Switch
Form Factor	DIN Rail Mountable
MAC Address Table Size	8000
Jumbo Frame Support	9216 bytes
Operating Temperature	-40°C to 70°C
Mean Time Between Failures (MTBF)	Over 500, 000 hours
Memory	256 MB DRAM
Mounting	DIN Rail, Wall
Certifications	EN 50121-4
Ports	8 x 10/100Base-TX Ethernet Ports