502 Dynamic ARP Inspection Commands
ip arp inspection
filter
Use this command to configure the ARP ACL used to filter invalid ARP packets
on a list of comma-separated VLAN ranges. If the static keyword is given,
packets that do not match a permit statement are dropped without consulting the
DHCP snooping bindings.
no ip arp inspection
filter
Use this command to unconfigure the ARP ACL used to filter invalid ARP
packets on a list of comma-separated VLAN ranges.
arp access-list Use this command to create an ARP ACL.
no arp access-list Use this command to delete a configured ARP ACL.
permit ip host mac
host
Use this command to configure a rule for a valid IP address and MAC address
combination used in ARP packet validation.
Default
No ARP ACL is configured on a VLAN
Format
ip arp inspection filter acl-name vlan vlan-list
[static]
Mode Global Config
Format
no ip arp inspection filter acl-name vlan vlan-list
[static]
Mode Global Config
Format
arp access-list acl-name
Mode Global Config
Format
no arp access-list acl-name
Mode Global Config
Format
permit ip host sender-ip mac host sender-mac