Enable or disable Dynamic ARP Inspection on a VLAN

You must enable DAI separately for each VLAN. When you enable DAI on a specific VLAN, the ARP packets are captured and inspected on that VLAN. DAI is disabled by default.

Note

Note

DAI cannot be enabled on Private VLANs (E-Tree) and SPBM B-VLANs.

Before you begin

You must enable DHCP Snooping globally.

Procedure

  1. Enter VLAN Interface Configuration mode:

    enable

    configure terminal

    interface vlan <1–4059>

  2. Enable DAI on the VLAN:

    ip arp-inspection enable

  3. Disable DAI on the VLAN:

    no ip arp-inspection enable

Example

Switch:1>enable
Switch:1#configure terminal
Switch:1(config)#interface vlan 5
Switch:1(config-if)#ip arp-inspection enable

Variable Definitions

The following table defines parameters for the ip arp-inspection command.

Variable

Value

enable

Enables or disables DAI on the specified VLAN.