Switching Commands
163
ProSafe Managed Switch
permit ip host mac host
Use this command to configure a rule for a valid IP address and MAC address combination
used in ARP packet validation.
Format permit ip host sender-ip mac host sender-mac
Mode
no permit ip host mac host
Use this command to delete a rule for a valid IP and MAC combination.
Format no permit ip host sender-ip mac host sender-mac
Mode
show ip arp inspection
Use this command to display the Dynamic ARP Inspection global configuration and
configuration on all the VLANs. With the vlan-list argument (i.e. comma separated VLAN
ranges), the command displays the global configuration and configuration on all the VLANs in
the given VLAN list. The global configuration includes the source mac validation,
destination mac validation and invalid IP validation information.
Format show ip arp inspection [vlan <vlan-list>]
Mode
• Privileged EXEC
• User EXEC
Example: The following shows example CLI display output for the command.
(Switch) #show ip arp inspection vlan 10-12
ARP Access-list Config
ARP Access-list Config
Term Definition
Source MAC
Validation
Displays whether Source MAC Validation of ARP frame is enabled or disabled.
Destination
MAC Validation
Displays whether Destination MAC Validation is enabled or disabled.
IP Address
Validation
Displays whether IP Address Validation is enabled or disabled.
VLAN
The VLAN ID for each displayed row.
Configuration
Displays whether DAI is enabled or disabled on the VLAN.
Log Invalid
Displays whether logging of invalid ARP packets is enabled on the VLAN.
ACL Name
The ARP ACL Name, if configured on the VLAN.
Static Flag
If the ARP ACL is configured static on the VLAN.