282 Dynamic ARP Inspection Commands

permit ip host mac host

Use the permit ip host mac host command to configure a rule for a valid IP
address and MAC address combination used in ARP packet validation. Use
the “no” form of this command to delete an ARP ACL rule.
Syntax
permit ip host

sender-ip

max host

sender-mac

no permit ip host

sender-ip

max host

sender-mac

sender-ip

— Valid IP address used by a host.

sender-mac

—Valid MAC address in combination with the above sender-ip
used by a host.
Default Configuration
There are no ARP ACL rules created by default.
Command Mode
ARP Access-list Configuration mode
User Guidelines
There are no user guidelines for this command.
Example
console(Config-arp-access-list)#permit ip host
1.1.1.1 mac host 00:01:02:03:04:05

show arp access-list

Use the show arp access-list command to display the configured ARP ACLs
with the rules. Giving an ARP ACL name as the argument would display only
the rules in that ARP ACL.
Syntax
show arp access-list [

acl-name

]

acl-name

— A valid ARP ACL name (Range: 1–31 characters).