Use this command to display the statistics of the ARP packets processed by Dynamic ARP Inspection. Give the vlan-list argument and the command displays the statistics on all DAI-enabled VLANs in that list. Give the single vlan argument and the command displays the statistics on that VLAN. If no argument is included, the command lists a summary of the forwarded and dropped ARP packets.
| Format | show ip arp inspection statistics [vlan vlan-list] |
| Mode |
|
| Term | Definition |
|---|---|
| VLAN | The VLAN ID for each displayed row. |
| Forwarded | The total number of valid ARP packets forwarded in this VLAN. |
| Dropped | The total number of not valid ARP packets dropped in this VLAN. |
| DHCP Drops | The number of packets dropped due to DHCP snooping binding database match failure. |
| ACL Drops | The number of packets dropped due to ARP ACL rule match failure. |
| DHCP Permits | The number of packets permitted due to DHCP snooping binding database match. |
| ACL Permits | The number of packets permitted due to ARP ACL permit rule match. |
| ACL Denials | The number of packets denied due to ARP ACL deny rule match. |
| Bad Src MAC | The number of packets dropped due to Source MAC validation failure. |
| Bad Dest MAC | The number of packets dropped due to Destination MAC validation failure. |
| Invalid IP | The number of packets dropped due to invalid IP checks. |
Example: The following shows example CLI display output for the command show ip arp inspection statistics which lists the summary of forwarded and dropped ARP packets on all DAI-enabled VLANs.
VLAN Forwarded Dropped ---- --------- ------- 10 90 14 20 10 3
Example: The following shows example CLI display output for the command show ip arp inspection statistics vlan 10,20.
VLAN DHCP ACL DHCP ACL ACL Bad Src Bad Dest Invalid
Drops Drops Permits Permits Denials MAC MAC IP
----- -------- --------- ----------- --------- --------- ---------- ----------- ---------
10 11 1 65 25 5 1 1 0
20 1 0 8 2 3 0 1 1
