and a second ip arp inspection validate command to enable ip validation, the src-mac and dst-mac
validations are disabled when you enter the second command.
SUMMARY STEPS
1. configure terminal
2. [no] ip arp inspection validate {[src-mac] [dst-mac] [ip]}
3. (Optional) show running-config dhcp
4. (Optional) copy running-config startup-config
DETAILED STEPS
PurposeCommand or Action
Enters global configuration mode.configure terminal
Example:
Step 1
switch# configure terminal
switch(config)#
Enables additional DAI validation. The no form of this
command disables additional DAI validation.
[no] ip arp inspection validate {[src-mac] [dst-mac] [ip]}
Example:
Step 2
switch(config)# ip arp inspection validate src-mac
dst-mac ip
Displays the DHCP snooping configuration, including the
DAI configuration.
(Optional) show running-config dhcp
Example:
Step 3
switch(config)# show running-config dhcp
Copies the running configuration to the startup
configuration.
(Optional) copy running-config startup-config
Example:
Step 4
switch(config)# copy running-config startup-config
Configuring the DAI Logging Buffer Size
You can configure the DAI logging buffer size. The default buffer size is 32 messages.
SUMMARY STEPS
1. configure terminal
2. [no] ip arp inspection log-buffer entries number
3. (Optional) show running-config dhcp
4. (Optional) copy running-config startup-config
Cisco Nexus 9000 Series NX-OS Security Configuration Guide, Release 9.x
397
Configuring Dynamic ARP Inspection
Configuring the DAI Logging Buffer Size