Security Commands
327
ProSAFE M7100 Managed Switches
The following shows example CLI display output for the show ip arp inspection
statistics command, which lists the summary of forwarded and dropped ARP packets on all
DAI-enabled VLANs:
VLAN Forwarded Dropped
---- --------- -------
10 90 14
20 10 3
The following shows example CLI display output for the show ip arp inspection
statistics vlan <vlan-list> command:
VLAN DHCP ACL DHCP ACL Bad Src Bad Dest Invalid
Drops Drops Permits Permits MAC MAC IP
------ ------- --------- ----------- --------- ---------- ----------- ---------
10 11 1 65 25 1 1 0
20 1 0 8 2 0 1 1
clear ip arp inspection statistics
Use this command to reset the statistics for Dynamic ARP Inspection on all VLANs.
show ip arp inspection interfaces
Use this command to display the Dynamic ARP Inspection configuration on all the DAI-enabled
interfaces. An interface is said to be enabled for DAI if at least one VLAN, that the interface is a
member of, is enabled for DAI. Given a slot/port interface argument, the command displays the
values for that interface whether the interface is enabled for DAI or not.
Bad Src MAC The number of packets dropped due to Source MAC validation failure.
Bad Dest MAC The number of packets dropped due to Destination MAC validation failure.
Invalid IP The number of packets dropped due to invalid IP checks.
Default
none
Format clear ip arp inspection statistics
Mode Privileged EXEC
Format show ip arp inspection interfaces [slot/port]
Mode • Privileged EXEC
• User EXEC
Term Definition
To Next Page
Loading...
Need help?
General