Dynamic ARP Inspection Commands 277
Syntax
ip arp inspection vlan
vlan-range
[ logging ]
no ip arp inspection vlan
vlan-range
[ logging ]
•
vlan-range
— A valid range of VLAN IDs.
•
logging
— Use this parameter to enable logging of invalid packets.
Default Configuration
Dynamic ARP Inspection is disabled by default.
Command Mode
Global Configuration mode
User Guidelines
There are no user guidelines for this command.
Example
console(config)#ip arp inspection vlan 200-300
console(config)#ip arp inspection vlan 200-300
logging
permit ip host mac host
Use the permit ip host mac host command to configure a rule for a valid IP
address and MAC address combination used in ARP packet validation. Use
the “no” form of this command to delete an ARP ACL rule.
Syntax
permit ip host
sender-ip
max host
sender-mac
no permit ip host
sender-ip
max host
sender-mac
•
sender-ip
— Valid IP address used by a host.
•
sender-mac
—Valid MAC address in combination with the above sender-ip
used by a host.