11.07.2015 Views

Catalyst 3750-E and 3560-E Switch Cisco IOS ... - DNIP . NET

Catalyst 3750-E and 3560-E Switch Cisco IOS ... - DNIP . NET

Catalyst 3750-E and 3560-E Switch Cisco IOS ... - DNIP . NET

SHOW MORE
SHOW LESS

You also want an ePaper? Increase the reach of your titles

YUMPU automatically turns print PDFs into web optimized ePapers that Google loves.

ip arp inspection validateChapter 2<strong>Catalyst</strong> <strong>3750</strong>-E <strong>and</strong> <strong>3560</strong>-E <strong>Switch</strong> <strong>Cisco</strong> <strong>IOS</strong> Comm<strong>and</strong>sUsage GuidelinesYou must specify at least one of the keywords. Each comm<strong>and</strong> overrides the configuration of theprevious comm<strong>and</strong>; that is, if a comm<strong>and</strong> enables src-mac <strong>and</strong> dst-mac validations, <strong>and</strong> a secondcomm<strong>and</strong> enables IP validation only, the src-mac <strong>and</strong> dst-mac validations are disabled as a result of thesecond comm<strong>and</strong>.The allow-zeros keyword interacts with ARP access control lists (ACLs) in this way:• If you configure an ARP ACL to deny ARP probes, they are dropped even if the allow-zero keywordis specified.• If you configure an ARP ACL that specifically permits ARP probes <strong>and</strong> configure the ip arpinspection validate ip comm<strong>and</strong>, ARP probes are dropped unless you enter the allow-zeroskeyword.The no form of the comm<strong>and</strong> disables only the specified checks. If none of the options are enabled, allchecks are disabled.ExamplesThis example show how to enable source MAC validation:<strong>Switch</strong>(config)# ip arp inspection validate src-macYou can verify your setting by entering the show ip arp inspection vlan vlan-range privileged EXECcomm<strong>and</strong>.Related Comm<strong>and</strong>s Comm<strong>and</strong> Descriptionshow inventory vlanvlan-rangeDisplays the configuration <strong>and</strong> the operating state of dynamic ARPinspection for the specified VLAN.2-224<strong>Catalyst</strong> <strong>3750</strong>-E <strong>and</strong> <strong>3560</strong>-E <strong>Switch</strong> Comm<strong>and</strong> ReferenceOL-9776-08

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!