Ip Arp Inspection Vlan - Cisco WS-C3560E-24PD-E Command Reference Manual

Chapter 2 Catalyst 3560 Switch Cisco IOS Commands

ip arp inspection vlan

Use the ip arp inspection vlan global configuration command to enable dynamic Address Resolution
Protocol (ARP) inspection on a per-VLAN basis. Use the no form of this command to return to the
default setting.
This command is available only if your switch is running the IP services image, formerly known as the
enhanced multilayer image (EMI).
Syntax Description
vlan-range
Defaults ARP inspection is disabled on all VLANs.
Command Modes Global configuration
Command History Release
12.2(20)SE
Usage Guidelines
You must specify the VLANs on which to enable dynamic ARP inspection.
Dynamic ARP inspection is supported on access ports, trunk ports, EtherChannel ports, or private VLAN
ports.
Examples This example shows how to enable dynamic ARP inspection on VLAN 1:
Switch(config)# ip arp inspection vlan 1
You can verify your setting by entering the show ip arp inspection vlan vlan-range privileged EXEC
command.
Related Commands Command
arp access-list
show inventory
vlan-range
78-16405-05
ip arp inspection vlan vlan-range
no ip arp inspection vlan vlan-range
VLAN number or range.
You can specify a single VLAN identified by VLAN ID number, a range of
VLANs separated by a hyphen, or a series of VLANs separated by a comma.
The range is 1 to 4094.
Modification
This command was introduced.
Description
Defines an ARP access control list (ACL).
vlan Displays the configuration and the operating state of dynamic ARP
inspection for the specified VLAN.
ip arp inspection vlan
Catalyst 3560 Switch Command Reference
2-137