Configuring Dynamic ARP Inspection
Command or Action
Step 3
(Optional) show running-config dhcp
Example:
switch(config)# show running-config dhcp
Step 4
(Optional) copy running-config startup-config
Example:
switch(config)# copy running-config startup-config
Verifying the DAI Configuration
To display the DAI configuration information, perform one of the following tasks.
Command
show ip arp inspection
show ip arp inspection interfaces [ethernet
slot/port | port-channel number]
show ip arp inspection log
show ip arp inspection vlan vlan-id
show running-config dhcp [all]
Monitoring and Clearing DAI Statistics
To monitor and clear DAI statistics, use the commands in this table.
Command
show ip arp inspection statistics [vlan vlan-id]
clear ip arp inspection statistics vlan vlan-id
clear ip arp inspection log
Purpose
• permit—Logs packets permitted by DHCP bindings.
Displays the DHCP snooping configuration, including the
DAI configuration.
Copies the running configuration to the startup
configuration.
Purpose
Displays the status of DAI.
Displays the trust state and ARP packet rate for a
specific interface or port channel.
Displays the DAI log configuration.
Displays the DAI configuration for a specific VLAN.
Displays the DAI configuration.
Cisco Nexus 9000 Series NX-OS Security Configuration Guide, Release 9.x
Verifying the DAI Configuration
Purpose
Displays DAI statistics.
Clears DAI statistics.
Clears DAI logs.
399