Layer 2 Switching Commands 375Default ConfigurationInterfaces are configured as untrusted by default.Command ModeInterface Configuration (gigabitethernet, port-channel, tengigabitethernet,fortygigabitethernet) modeUser GuidelinesThere are no user guidelines for this command.Exampleconsole(config-if-Gi1/0/3)#ip arp inspection trustip arp inspection validateUse the ip arp inspection validate command to enable additional validationchecks like source MAC address validation, destination MAC addressvalidation or IP address validation on the received ARP packets. Eachcommand overrides the configuration of the previous command. Forexample, if a command enables source MAC address and destination MACaddress validations and a second command enables IP address validation only,the source MAC address and destination MAC address validations aredisabled as a result of the second command. Use the “no” form of thiscommand to disable additional validation checks.Syntaxip arp inspection validate {[src-mac] [dst-mac] [ip]}no ip arp inspection validate {[src-mac] [dst-mac] [ip]}• src-mac — For validating the source MAC address of an ARP packet.• dst-mac — For validating the destination MAC address of an ARP packet.• ip — For validating the IP address of an ARP packet.Default ConfigurationThere is no additional validation enabled by default.
