Table of Contents
Advertisement
ip arp inspection filter
Use this command to configure the ARP ACL used to filter invalid ARP packets on a list of comma-separated VLAN ranges.
If the static keyword is given, packets that do not match a permit statement are dropped without consulting the DHCP
snooping bindings.
Default
No ARP ACL is configured on a VLAN
Format
ip arp inspection filter acl-name vlan vlan-list [static]
Mode
Global Config
no ip arp inspection filter
Use this command to unconfigure the ARP ACL used to filter invalid ARP packets on a list of comma-separated VLAN
ranges.
Format
no ip arp inspection filter acl-name vlan vlan-list [static]
Mode
Global Config
arp access-list
Use this command to create an ARP ACL.
Format
arp access-list acl-name
Mode
Global Config
no arp access-list
Use this command to delete a configured ARP ACL.
Format
no arp access-list acl-name
Mode
Global Config
permit ip host mac host
Use this command to configure a rule for a valid IP address and MAC address combination used in ARP packet validation.
Format
permit ip host sender-ip mac host sender-mac
Mode
ARP Access-list Config
no permit ip host mac host
Use this command to delete a rule for a valid IP and MAC combination.
Format
no permit ip host sender-ip mac host sender-mac
Mode
ARP Access-list Config
Dynamic ARP Inspection Commands
115
Advertisement
Table of Contents
