DELL PC6248 User Manual

Dynamic ARP Inspection Commands

Use the ip arp inspection validate command to enable additional validation 

checks like source MAC address validation, destination MAC address 

validation or IP address validation on the received ARP packets. Each 

command overrides the configuration of the previous command. For 

example, if a command enables source MAC address and destination MAC 

address validations and a second command enables IP address validation only, 

the source MAC address and destination MAC address validations are 

disabled as a result of the second command. Use the “no” form of this 

command to disable additional validation checks.

ip arp inspection validate {[src-mac] [dst-mac] [ip]}
no ip arp inspection validate {[src-mac] [dst-mac] [ip]}

• src-mac

—

For validating the source MAC address of an ARP packet.

• dst-mac

—

For validating the destination MAC address of an ARP packet.

•

—

For validating the IP address of an ARP packet.

There is no additional validation enabled by default.

Global Configuration mode

There are no user guidelines for this command

console(config)#ip arp inspection validate src-mac 

dst-mac ip

console(config)#ip arp inspection validate src-mac ip

console(config)#ip arp inspection validate dst-mac ip

console(config)#ip arp inspection validate ip