Cisco Catalyst 250 Series User Manual

SUMMARY STEPS
1.
enable
2.
configure terminal
3.
arp access-list acl-name
4.
permit ip host sender-ip mac host sender-mac
5.
exit
6.
ip arp inspection filter arp-acl-name vlan vlan-range [static]
7.
interface interface-id
8.
no ip arp inspection trust
9.
end
10.
Use the following show commands:
•
show arp access-list acl-name
•
show ip arp inspection vlan vlan-range
•
show ip arp inspection interfaces
11.
show running-config
12.
copy running-config startup-config
DETAILED STEPS
PurposeCommand or Action
Enables privileged EXEC mode. Enter your password if prompted.enable
Step 1
Example:
Switch> enable
Enters the global configuration mode.configure terminal
Example:
Switch# configure terminal
Step 2
Defines an ARP ACL, and enters ARP access-list configuration mode. By
default, no ARP access lists are defined.
arp access-list acl-name
Step 3
At the end of the ARP access list, there is an implicit deny ip any
mac any command.
Note
Permits ARP packets from the specified host (Host 2).
permit ip host sender-ip mac host
sender-mac
Step 4
•
Forsender-ip, enter the IP address of Host 2.
•
For sender-mac, enter the MAC address of Host 2.
Catalyst 2960-X Switch Security Configuration Guide, Cisco IOS Release 15.0(2)EX
250 OL-29048-01
Configuring Dynamic ARP Inspection
Configuring ARP ACLs for Non-DHCP Environments

Cisco Catalyst 250 Series Specifications

General

Brand	Cisco
Model	Catalyst 250 Series
Category	Switch
Language	English