DGS-6604
ip arp inspection vlan
CLI Reference Guide
240
ip arp inspection vlan
Use the command to enable specific VLANs for dynamic ARP inspection. Use
the
no
form of the command disable dynamic ARP inspection for VLAN.
ip arp inspection vlan
VLAN-ID
[, | -]
no ip arp inspection vlan
VLAN-ID
[, | -
]
Default
ARP inspection is disabled on all VLANs.
Command Mode
Global configuration mode
Usage Guideline
When a VLAN is enabled for ARP inspection, the ARP packets, including both
ARP request and response packet belonging to the VLAN arriving at the un-
trusted interface will be validated. If the IP to MAC address binding pair the
source MAC address and the source IP address in the Ethernet header is not
permitted by the ARP ACL or the DHCP snooping binding database, the ARP
packet will be dropped.
Example
This example shows how to enable ARP inspection on VLAN2:
Syntax Description
vlan
VLAN-ID
Specify the VLAN to enable or disable the ARP inspection function.
,
(Optional) Specify a series of VLANs, or separate a range of VLANs from a
previous range. Enter a space before and after the comma.
-
(Optional) Specify a range of VLANs. Enter a space before and after the hyphen.
Switch# configure terminal
Switch(config)# ip arp inspection vlan 2
Switch(config)#