Apply an ARP ACL to a VLAN

The most recently applied ACL replaces an existing ACL. You do not need to remove an existing ACL.

1. Access global configuration mode.
   

   device# configure terminal

2. Access VLAN configuration mode.
   

   device(config)# vlan 200

3. Specify the ACL that you want to apply.
   For more information, see Create an ARP Access Control List.
   

   device(config-vlan-200)# ip arp inspection filter ARP_ACL_01

4. Return to global configuration mode to, for example, define trusted and untrusted interfaces and to enable DAI.
   

   device(config-vlan-200)# exit

The following example summarizes the commands in this procedure.

device# configure terminal
device(config)# vlan 200
device(config-vlan-200)# ip arp inspection filter ARP_ACL_01
device(config-vlan-200)# exit