3.10.17 ARP Inspection and Port Mode Configuration

Use this command to globally enable/disable ARP Inspection and specify on which port ARP Inspection is enabled. Enable/Disable check VLAN operation and specify one of the three log types: log all entries, permitted entries, or denied entries. Translate all dynamic entries into static entries.

Command Syntax:

ip arp inspection 
ip arp inspection check-vlan 
ip arp inspection logging { deny | permit | all }
ip arp inspection translate

Argument

Description

Parameter

N.A

N.A

Default

N.A

Mode

Global Configuration mode and Port List Interface Mode

Usage

Enable ARP inspection. To disable it, use the ‘no’ version of the command.

Example

Example 1:

Enable ARP Inspection.
(config)# ip arp inspection

Example 2:

Enable ARP inspection VLAN mode on port 1.

(config)# interface GigabitEthernet 1/1
(config-if)# ip arp inspection check-vlan