Dynamic ARP Inspection Commands 227
Syntax
ip arp inspection validate {[src-mac] [dst-mac] [ip]}
no ip arp inspection validate {[src-mac] [dst-mac] [ip]}
•
src-mac
—
For validating the source MAC address of an ARP packet.
•
dst-mac
—
For validating the destination MAC address of an ARP packet.
•
ip
—
For validating the IP address of an ARP packet.
Default Configuration
There is no additional validation enabled by default.
Command Mode
Global Configuration mode
User Guidelines
There are no user guidelines for this command
Example
console(config)#ip arp inspection validate src-mac dst-mac ip
console(config)#ip arp inspection validate src-mac ip
console(config)#ip arp inspection validate dst-mac ip
console(config)#ip arp inspection validate ip
ip arp inspection vlan
Use the ip arp inspection vlan command to enable Dynamic ARP Inspection on a single VLAN 
or a range of VLANs. Use the “no” form of this command to disable Dynamic ARP Inspection 
on a single VLAN or a range of VLANs.
Syntax
ip arp inspection vlan 
vlan-range
 [ logging ]
no ip arp inspection vlan 
vlan-range
 [ logging ]
•
vlan-range
 — A valid range of VLAN IDs.
•
logging
 — Use this parameter to enable logging of invalid packets.
Default Configuration
Dynamic ARP Inspection is disabled by default.