You can enable Dynamic ARP Inspection (DAI) on a VLAN.
device# configure terminal
device(config)# vlan 1001
device(config-vlan-1001)# ip arp inspection
device# configure terminal device(config)# vlan 1001 device(config-vlan-1001)# ip arp inspection