Switching Commands
151
M4100 Series ProSAFE Managed Switches
permit ip host mac host
Use this command to configure a rule for a valid IP address and MAC address combination
used in ARP packet validation.
no permit ip host mac host
Use this command to delete a rule for a valid IP and MAC combination.
show ip arp inspection
Use this command to display the Dynamic ARP Inspection global configuration and
configuration on all the VLANs. With the <vlan-list> argument (that is, comma-separated
VLAN ranges), the command displays the global configuration and configuration on all the
VLANs in the VLAN list. The global configuration includes the source mac validation,
destination mac validation, and invalid IP validation information.
Format permit ip host <sender-ip> mac host <sender-mac>
Mode ARP Access-list Config
Format no permit ip host <sender-ip> mac host <sender-mac>
Mode ARP Access-list Config
Format show ip arp inspection [vlan <vlan-list>]
Mode • Privileged EXEC
• User EXEC
Term Definition
Source MAC
Validation
Displays whether Source MAC Validation of ARP frame is enabled or disabled.
Destination MAC
Validation
Displays whether Destination MAC Validation is enabled or disabled.
IP Address
Validation
Displays whether IP Address Validation is enabled or disabled.
VLAN The VLAN ID for each displayed row.
Configuration Displays whether DAI is enabled or disabled on the VLAN.
Log Invalid Displays whether logging of invalid ARP packets is enabled on the VLAN.
ACL Name The ARP ACL Name, if configured on the VLAN.
Static Flag If the ARP ACL is configured static on the VLAN.