Home » Cisco » 300-115 » Which command must you configure on the device to detect unexpected IP addresses in the ARP packet?
You are configuring dynamic ARP inspection. Which command must you configure on the device to detect unexpected IP addresses in the ARP packet?
A. ip verify source
B. ip arp inspection validate ip
C. ip arp inspection trust
D. ip arp inspection vlan
Correct Answer: B
Explanation/Reference:
Reference: https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst9500/software/release/16-6/configuration_guide/sec/b_166_sec_9500_cg/configuring_dynamic_arp_inspection.pdf
https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst9500/software/release/16-6/configuration_guide/sec/b_166_sec_9500_cg/configuring_dynamic_arp_inspection.html#reference_D7E71F366A72413B844C98D839E024A4
You can configure dynamic ARP inspection to drop ARP packets when the IP addresses in the packets are invalid or when the MAC addresses in the body of the ARP packets do not match the addresses specified in the Ethernet header. Use the ip arp inspection validate {[src-mac] [dst-mac] [ip]} global configuration command.