Enable or disable Dynamic ARP Inspection on a VLAN
You must enable DAI separately for each VLAN. When you enable DAI on a specific VLAN, the ARP packets are captured and inspected on that VLAN. DAI is disabled by default.
Note
DAI cannot be enabled on Private VLANs (E-Tree) and SPBM B-VLANs.
Before you begin
You must enable DHCP Snooping globally.
Procedure
Example
Switch:1>enable Switch:1#configure terminal Switch:1(config)#interface vlan 5 Switch:1(config-if)#ip arp-inspection enable
Variable Definitions
The following table defines parameters for the ip arp-inspection command.
Variable |
Value |
---|---|
enable |
Enables or disables DAI on the specified VLAN. |