Chapter 5: Switching Commands 503
no permit ip host
mac host
Use this command to delete a rule for a valid IP and MAC combination.
show ip arp
inspection
Use this command to display the Dynamic ARP Inspection global configuration
and configuration on all the VLANs. With the vlan-list argument (i.e. comma
separated VLAN ranges), the command displays the global configuration and
configuration on all the VLANs in the given VLAN list. The global configuration
includes the source mac validation, destination mac validation and invalid IP
validation information.
Mode ARP Access-list Config
Format
no permit ip host sender-ip mac host sender-mac
Mode ARP Access-list Config
Format
show ip arp inspection [vlan
vlan-list
]
Mode ◆ Privileged EXEC
◆ User EXEC
Term Definition
Source MAC
Validation
Displays whether Source MAC Validation of ARP
frame is enabled or disabled.
Destination MAC
Validation
Displays whether Destination MAC Validation is
enabled or disabled.
IP Address Validation Displays whether IP Address Validation is enabled
or disabled.
VLAN The VLAN ID for each displayed row.
Configuration Displays whether DAI is enabled or disabled on the
VLAN.
Log Invalid Displays whether logging of invalid ARP packets is
enabled on the VLAN.