Cisco WS-C3560E-48PD-SF Command Reference - Page 169
ip arp inspection vlan
View all Cisco WS-C3560E-48PD-SF manuals
Add to My Manuals
Save this manual to your list of manuals |
Page 169 highlights
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands ip arp inspection vlan ip arp inspection vlan Use the ip arp inspection vlan global configuration command to enable dynamic Address Resolution Protocol (ARP) inspection on a per-VLAN basis. Use the no form of this command to return to the default setting. ip arp inspection vlan vlan-range no ip arp inspection vlan vlan-range This command is available only if your switch is running the IP services image, formerly known as the enhanced multilayer image (EMI). Syntax Description vlan-range VLAN number or range. You can specify a single VLAN identified by VLAN ID number, a range of VLANs separated by a hyphen, or a series of VLANs separated by a comma. The range is 1 to 4094. Defaults ARP inspection is disabled on all VLANs. Command Modes Global configuration Command History Release 12.2(20)SE Modification This command was introduced. Usage Guidelines You must specify the VLANs on which to enable dynamic ARP inspection. Dynamic ARP inspection is supported on access ports, trunk ports, EtherChannel ports, or private VLAN ports. Examples This example shows how to enable dynamic ARP inspection on VLAN 1: Switch(config)# ip arp inspection vlan 1 You can verify your setting by entering the show ip arp inspection vlan vlan-range privileged EXEC command. Related Commands Command arp access-list show inventory vlan vlan-range Description Defines an ARP access control list (ACL). Displays the configuration and the operating state of dynamic ARP inspection for the specified VLAN. 78-16405-05 Catalyst 3560 Switch Command Reference 2-137