228 Dynamic ARP Inspection Commands
Command Mode
Global Configuration mode
User Guidelines
There are no user guidelines for this command.
Example
console(config)#ip arp inspection vlan 200-300
console(config)#ip arp inspection vlan 200-300 logging
permit ip host mac host
Use the permit ip host mac host command to configure a rule for a valid IP address and MAC 
address combination used in ARP packet validation. Use the “no” form of this command to 
delete an ARP ACL rule.
Syntax
permit ip host 
sender-ip
 max host 
sender-mac
no permit ip host 
sender-ip
 max host 
sender-mac
•
sender-ip
 — Valid IP address used by a host.
•
sender-mac
 —Valid MAC address in combination with the above sender-ip used by a host.
Default Configuration
There are no ARP ACL rules created by default.
Command Mode
ARP Access-list Configuration mode
User Guidelines
There are no user guidelines for this command.
Example
console(Config-arp-access-list)#permit ip host 1.1.1.1 mac host 
00:01:02:03:04:05