CLI Guide

Layer 2 Switching Commands 391
Command Mode
Global Configuration mode
User Guidelines
Dynamic ARP Inspection validates the source MAC address and source IP
address in received ARP responses against the DHCP Snooping bindings.
ARP responses that fail the check are discarded without updating the ARP
cache.
Example
console(config)#ip arp inspection vlan 200-300
console(config)#ip arp inspection vlan 200-300 logging
permit ip host mac host
Use the permit ip host mac host command to configure an IP address and
MAC address combination used in ARP packet validation. Use the “no” form
of this command to delete the ARP ACL rule.
Syntax
permit ip host sender-ip mac host sender-mac
no permit ip host sender-ip mac host sender-mac
• sender-ip — Valid IP address used by a host.
• sender-mac —Valid MAC address in combination with the above sender-ip
used by a host.
Default Configuration
There are no ARP ACL rules created by default.
Command Mode
ARP Access-list Configuration mode
User Guidelines
There are no user guidelines for this command.