0

I have dhcp snooping an arp inspection setup on my VLAN. I have a number of clients that need to be statically set on this VLAN but still plug into a DHCP access port on the VLAN. I have ip dhcp Snooping enable on the VLAN and ip arp inspection These clients need to move around the switch so they can't be statically set to a specific interface. I have made an arp access-list and it looks like so:

ip arp inspection filter TEST_EQUIP vlan 10    
arp access-list TEST_EQUIP
  permit ip host 192.168.1.104 mac host 0000.0000.0001

Is it possible to do this and not specify an interface so it can move around the VLAN to any port? Information found on Cisco's website does not stipulate it must be tied.

10
  • You can trust on the interface: ip arp inspection trust.
    – Ron Maupin
    Apr 5, 2021 at 21:49
  • @RonMaupin but which interface? The switch port? Because I can't secure it to 1 Interface.
    – JukEboX
    Apr 5, 2021 at 21:53
  • Yes, the switch interface.
    – Ron Maupin
    Apr 5, 2021 at 21:53
  • @RonMaupin I need to have this device and 20+ others move around this switch. These ports aren't all for these devices. I can't just trust the interface.
    – JukEboX
    Apr 5, 2021 at 21:55
  • 1
    Then set an entry for each interface it may use. What you want is really not how it is designed. This is primarily for things like servers and printers that do not move.
    – Ron Maupin
    Apr 5, 2021 at 22:26

0

Browse other questions tagged or ask your own question.