228 Dynamic ARP Inspection Commands
Command Mode
Global Configuration mode
User Guidelines
There are no user guidelines for this command.
Example
console(config)#ip arp inspection vlan 200-300
console(config)#ip arp inspection vlan 200-300 logging
permit ip host mac host
Use the permit ip host mac host command to configure a rule for a valid IP address and MAC
address combination used in ARP packet validation. Use the “no” form of this command to
delete an ARP ACL rule.
Syntax
permit ip host
sender-ip
max host
sender-mac
no permit ip host
sender-ip
max host
sender-mac
•
sender-ip
— Valid IP address used by a host.
•
sender-mac
—Valid MAC address in combination with the above sender-ip used by a host.
Default Configuration
There are no ARP ACL rules created by default.
Command Mode
ARP Access-list Configuration mode
User Guidelines
There are no user guidelines for this command.
Example
console(Config-arp-access-list)#permit ip host 1.1.1.1 mac host
00:01:02:03:04:05