DAI – The ip arp inspection validate command

It can be used when the MAC addresses in the body of the ARP packets do not match the addresses that are specified in the Ethernet header

• Entering multiple ip arp inspection validate commands overwrites the previous command
• To include more than one validation method, enter them on the same command line as shown in the output

The ip arp inspection validate {[src-mac] [dst-mac] [ip]} global configuration command is used to configure DAI to drop ARP packets when the IP addresses are invalid