Cisco Catalyst 2960-X Security Configuration Manual page 274
Cisco ios release 15.0(2)ex
Hide thumbs
Also See for Catalyst 2960-X:
- Command reference manual (135 pages) ,
- Hardware installation manual (34 pages) ,
- Getting started manual (25 pages)
Table of Contents
Advertisement
Configuring ARP ACLs for Non-DHCP Environments
SUMMARY STEPS
1. enable
2. configure terminal
3. arp access-list acl-name
4. permit ip host sender-ip mac host sender-mac
5. exit
6. ip arp inspection filter arp-acl-name vlan vlan-range [static]
7. interface interface-id
8. no ip arp inspection trust
9. end
10. Use the following show commands:
11. show running-config
12. copy running-config startup-config
DETAILED STEPS
Command or Action
Step 1
enable
Example:
Switch> enable
Step 2
configure terminal
Example:
Switch# configure terminal
Step 3
arp access-list acl-name
Step 4
permit ip host sender-ip mac host
sender-mac
Catalyst 2960-X Switch Security Configuration Guide, Cisco IOS Release 15.0(2)EX
250
• show arp access-list acl-name
• show ip arp inspection vlan vlan-range
• show ip arp inspection interfaces
Purpose
Enables privileged EXEC mode. Enter your password if prompted.
Enters the global configuration mode.
Defines an ARP ACL, and enters ARP access-list configuration mode. By
default, no ARP access lists are defined.
Note
Permits ARP packets from the specified host (Host 2).
• Forsender-ip, enter the IP address of Host 2.
• For sender-mac, enter the MAC address of Host 2.
At the end of the ARP access list, there is an implicit deny ip any
mac any command.
Configuring Dynamic ARP Inspection
OL-29048-01
Hide quick links:
Advertisement
Table of Contents
