Apply an ARP ACL to an Interface or Port-channel

For ARP Guard, use this procedure to apply an ARP ACL to an interface or port-channel.

About this task

The most recently applied ACL replaces an existing ACL. You do not need to remove an existing ACL.

1. Access global configuration mode.
   

   device# configure terminal

2. Access interface configuration mode.
   

   device(conf)# interface ethernet 1/2

3. Access Layer 2 mode.
   

   device(conf-if-eth-1/2)# switchport

4. Specify the ACL that you want to apply.
   For more information, see Create an ARP Access Control List.
   

   device(conf-if-eth-1/2)# ip arp inspection filter ARP_ACL_01

5. Return to global configuration mode.
   

   device(conf-if-eth-1/2)# exit
   device(conf)#

Example

The following example summarizes the commands in this procedure.

device# configure terminal
device(conf)# interface ethernet 1/2
device(conf-if-eth-1/2)# switchport
device(conf-if-eth-1/2)# ip arp inspection filter ARP_ACL_01
device(conf-if-eth-1/2)# exit