Cisco Catalyst 2960 Series, Configuration Manual

Page: 1388 / 2288

SUMMARY STEPS
1.
enable
2. configure terminal
3.
arp access-list acl-name
4.
permit ip host sender-ip mac host sender-mac
5. exit
6.
ip arp inspection filter arp-acl-name vlan vlan-range [ static ]
7. interface interface-id
8. no ip arp inspection trust
9.
end
10. Use the following show commands:
• show arp access-list acl-name
•
show ip arp inspection vlan vlan-range
•
show ip arp inspection interfaces
11. show running-config
12.
copy running-config startup-config
DETAILED STEPS
Purpose Command or Action
Enables privileged EXEC mode. Enter your password if prompted. enable
Step 1
Example:
Switch>
enable
Enters the global configuration mode. configure terminal
Example:
Switch# configure terminal
Step 2
Defines an ARP ACL, and enters ARP access-list configuration mode. By
default, no ARP access lists are defined. arp access-list acl-name
Step 3
At the end of the ARP access list, there is an implicit deny ip any
mac any
command.
Note
Permits ARP packets from the specified host (Host 2). permit ip host sender-ip mac host
sender-mac
Step 4
• For sender-ip , enter the IP address of Host 2.
• For sender-mac , enter the MAC address of Host 2.
Consolidated Platform Configuration Guide, Cisco IOS Release 15.2(4)E (Catalyst 2960-X Switches)
1306
Configuring ARP ACLs for Non-DHCP Environments