Configuring Dynamic ARP Inspection
SUMMARY STEPS
1. configure terminal
2. [no] ip arp inspection validate {[src-mac] [dst-mac] [ip]}
3. (Optional) show running-config dhcp
4. (Optional) copy running-config startup-config
DETAILED STEPS
Command or Action
Step 1
configure terminal
Example:
switch# configure terminal
switch(config)#
Step 2
[no] ip arp inspection validate {[src-mac] [dst-mac] [ip]}
Example:
switch(config)# ip arp inspection validate src-mac
dst-mac ip
Step 3
(Optional) show running-config dhcp
Example:
switch(config)# show running-config dhcp
Step 4
(Optional) copy running-config startup-config
Example:
switch(config)# copy running-config startup-config
Configuring the DAI Logging Buffer Size
You can configure the DAI logging buffer size. The default buffer size is 32 messages.
SUMMARY STEPS
1. configure terminal
2. [no] ip arp inspection log-buffer entries number
3. (Optional) show running-config dhcp
4. (Optional) copy running-config startup-config
and a second ip arp inspection validate command to enable ip validation, the src-mac and dst-mac
validations are disabled when you enter the second command.
Cisco Nexus 9000 Series NX-OS Security Configuration Guide, Release 9.x
Configuring the DAI Logging Buffer Size
Purpose
Enters global configuration mode.
Enables additional DAI validation. The no form of this
command disables additional DAI validation.
Displays the DHCP snooping configuration, including the
DAI configuration.
Copies the running configuration to the startup
configuration.
397