Verify The Configuration - Cisco WS-SUP32-GE-3B - Supervisor Engine 32 Software Configuration Manual

Chapter 35 Configuring Dynamic ARP Inspection
To set up an ARP ACL on switch Switch A, follow these steps:
Configure the access list to permit the IP address 1.1.1.1 and the MAC address 0001.0001.0001, and
Step 1

verify the configuration:

SwitchA# configure terminal
Enter configuration commands, one per line.
SwitchA(config)# arp access-list H2
SwitchA(config-arp-nacl)# permit ip host 1.1.1.1 mac host 1.1.1
SwitchA(config-arp-nacl)# end
SwitchA# show arp access-list
ARP access list H2
permit ip host 1.1.1.1 mac host 0001.0001.0001
Apply the ACL to VLAN 1, and verify the configuration:
Step 2
SwitchA# configure terminal
Enter configuration commands, one per line.
SwitchA(config)# ip arp inspection filter H2 vlan 1
SwitchA(config)# end
SwitchA#
SwitchA# show ip arp inspection vlan 1
Source Mac Validation
Destination Mac Validation : Disabled
IP Address Validation
Vlan
----
1
Vlan
----
1
SwitchA#
Step 3 Configure Fast Ethernet port 6/3 as untrusted, and verify the configuration:
SwitchA# configure terminal
Enter configuration commands, one per line.
SwitchA(config)# interface fastethernet 6/3
SwitchA(config-if)# no ip arp inspection trust
SwitchA(config-if)# end
Switch# show ip arp inspection interfaces fastethernet 6/3
Interface
---------------
Fa6/3
Switch#
OL-11439-03
: Disabled
: Disabled
Configuration Operation
------------- ---------
Enabled Active
ACL Logging DHCP Logging
----------- ------------
Deny Deny
Trust State
-----------
Untrusted
Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY
End with CNTL/Z.
End with CNTL/Z.
ACL Match
---------
H2
End with CNTL/Z.
Rate (pps)
----------
15
DAI Configuration Samples
Static ACL
----------
No
35-21