Layer 2 Switching Commands 377Exampleconsole(config)#ip arp inspection vlan 200-300console(config)#ip arp inspection vlan 200-300 loggingpermit ip host mac hostUse the permit ip host mac host command to configure a rule for a valid IPaddress and MAC address combination used in ARP packet validation. Usethe “no” form of this command to delete an ARP ACL rule.Syntaxpermit ip host sender-ip mac host sender-macno permit ip host sender-ip mac host sender-mac• sender-ip — Valid IP address used by a host.• sender-mac —Valid MAC address in combination with the above sender-ipused by a host.Default ConfigurationThere are no ARP ACL rules created by default.Command ModeARP Access-list Configuration modeUser GuidelinesThere are no user guidelines for this command.Exampleconsole(Config-arp-access-list)#permit ip host 1.1.1.1 mac host00:01:02:03:04:05show arp access-listUse the show arp access-list command to display the configured ARP ACLswith the rules. Giving an ARP ACL name as the argument would display onlythe rules in that ARP ACL.
