arp inspection

Description

Enables Dynamic ARP Inspection on the current VLAN, forcing all ARP packets from untrusted ports to be subjected to a MAC-IP association check against a binding table.

The no form of this command disables Dynamic ARP Inspection on the VLAN.

Command context

config-vlan-<VLAN-ID>

Authority

Administrators or local user group members with execution rights for this command.

Examples

Enabling dynamic ARP inspection:

switch# configure terminal
switch(config)# vlan 1
switch(config-vlan)# arp inspection

Disabling dynamic ARP inspection:

switch# configure terminal
switch(config)# vlan 1
switch(config-vlan)# no arp inspection