Ip Arp Inspection Vlan; Ip Arp Inspection Trust - Cisco 300 Series Cli Manual

DHCP Snooping and ARP Inspection Commands
78-21075-01 Command Line Interface Reference Guide

42.21 ip arp inspection vlan

Use the ip arp inspection vlan Global Configuration mode command to enable
ARP inspection on a VLAN, based on the DHCP Snooping database. Use the no
form of this command to disable ARP inspection on a VLAN.
Syntax
ip arp inspection vlan
no ip arp inspection vlan
Parameters
vlan-id—Specifies the VLAN ID.
Default Configuration
DHCP Snooping based ARP inspection on a VLAN is disabled.
Command Mode
Global Configuration mode
User Guidelines
This command enables ARP inspection on a VLAN based on the DHCP snooping
database. Use the ip arp inspection list assign Global Configuration mode
command to enable static ARP inspection.
Example
The following example enables DHCP Snooping based ARP inspection on VLAN
23.
switchxxxxxx(config)#

42.22 ip arp inspection trust

Use the ip arp inspection trust Interface Configuration (Ethernet, Port-channel)
mode command to configure an interface trust state that determines if incoming
Address Resolution Protocol (ARP) packets are inspected. Use the no form of this
command to restore the default configuration.
vlan-id
vlan-id
ip arp inspection vlan 23
42
699