Cisco Catalyst 2960-X Security Configuration Manual page 277

Configuring Dynamic ARP Inspection
SUMMARY STEPS
1. enable
2. show cdp neighbors
3. configure terminal
4. ip arp inspection vlan vlan-range
5. Interfaceinterface-id
6. ip arp inspection trust
7. end
8. show ip arp inspection interfaces
9. show ip arp inspection vlan vlan-range
10. show ip dhcp snooping binding
11. show ip arp inspection statistics vlan vlan-range
12. configure terminal
13. configure terminal
DETAILED STEPS
Command or Action
Step 1 enable
Example:
Switch> enable
Step 2
show cdp neighbors
Example:
Switch(config-if)#show cdp neighbors
Step 3 configure terminal
Example:
Switch# configure terminal
Step 4 ip arp inspection vlan vlan-range
Example:
Switch(config)# ip arp inspection vlan 1
OL-29048-01
Configuring Dynamic ARP Inspection in DHCP Environments
Purpose
Enables privileged EXEC mode. Enter your password if prompted.
Verify the connection between the switches.
Enters the global configuration mode.
Enable dynamic ARP inspection on a per-VLAN basis. By default,
dynamic ARP inspection is disabled on all VLANs. For vlan-range,
specify a single VLAN identified by VLAN ID number, a range of
VLANs separated by a hyphen, or a series of VLANs separated by
a comma. The range is 1 to 4094. Specify the same VLAN ID for
both switches.
Catalyst 2960-X Switch Security Configuration Guide, Cisco IOS Release 15.0(2)EX
253