Configures ARP and DHCP related security parameters on this port-channel interface

Supported in the following platforms:

  • Service Platforms — NX5500, NX7500, NX9500, NX9600, VX9000


ip [arp|dhcp]
ip arp [header-mismatch-validation|trust]
ip dhcp trust


ip arp [header-mismatch-validation|trust]
ip arp [header-mismatch-validation| trust] Configures ARP related parameters on this port-channel interface
  • header-mismatch-validation – Enables a source MAC mismatch check in both the ARP and ethernet headers. This option is enabled by default.
  • trust – Enables ARP trust on this port channel. If enabled, ARP packets received on this port are considered trusted, and information from these packets is used to identify rogue devices. This option is disabled by default.
ip dhcp trust
ip dhcp trust Enables DHCP trust. If enabled, only DHCP responses are trusted and forwarded on this port channel, and a DHCP server can be connected only to a DHCP trusted port. This option is enabled by default.


nx9500-6C8809(config-profile-testNX9000-if-port-channel1)#ip arp trust

nx9500-6C8809(config-profile-testNX9000-if-port-channel1)#show context
 interface port-channel1
  description "This port-channel is for enabling dynamic LACP."
  duplex full
  ip arp trust

Related Commands

no Removes or reverts to default the ARP and DHCP security parameters configured