8 show ip arp inspection – CANOGA PERKINS CanogaOS Command Reference User Manual

Page 694

Advertising
background image

CanogaOS Command Line Reference

Revision 1.02

Proprietary & Confidential Canoga Pertkins Metro Ethernet Switches

Page 694 of 855

34.8 show ip arp inspection

To show the status of dynamic ARP inspection for a specific range of VLANs, use the show ip arp
inspection
command in privileged EXEC mode.


Command Syntax

show ip arp inspection {[statistics] vlan vlan-range | interfaces [interface-name]}

statistics

(Optional) Displays statistics for the following types of
packets that have been processed by this feature:
forwarded, dropped, MAC validation failure, and IP
validation failure.

vlan vlan-range

(Optional) When used with the statistics keyword, displays
the statistics for the selected range of VLANs. Without the
statistics keyword, displays the configuration and operating
state of DAI for the selected range of VLANs.

interfaces interface-name

(Optional) Displays the trust state and the rate limit of ARP
packets for the provided interface. When the interface
name is not specified, the command displays the trust state
and rate limit for all applicable interfaces in the system.


Command Mode

Privileged EXEC


Usage

To display all entries in the ARP cache, use this command without any arguments or keywords.


Examples

This example shows how to display the configuration and operating state of DAI for VLAN 1:
Switch# show ip arp inspection vlan 1
Source Mac Validation : Enabled
Destination Mac Validation : Disabled
IP Address Validation : Disabled
Vlan Configuration ACL Match Static ACL
=================================================================
1 enabled b

Vlan ACL Logging DHCP Logging
=================================================================
1 deny deny


Related Commands

arp access-list

Advertising