avillalva Sun, 06/01/2008 - 22:47
User Badges:

Hi Tarun,

Arp binds an IP to a mac address. To create a static arp entry type "arp x.x.x.x yyyy.yyyy.yyyy arpa" in global config.

Hope that helps,


tarun.shee Sun, 06/01/2008 - 23:20
User Badges:


I want to bind because,user will not change their IP address. If they change router will not allow them. So, this is not possibel in

"arp x.x.x.x yyyy.yyyy.yyyy arpa"



avillalva Mon, 06/02/2008 - 17:06
User Badges:

You can use an Arp ACL if changing IP's is an issue.

1. arp access-list Manage_Host_A

2. permit ip host mac host yyyy.yyyy.yyyy

3. deny ip any host yyyy.yyyy.yyyy

4. permit ip any any

5. (global config mode) ip arp inspection filter Manage_Host_A vlan 10 static

This is theory only, but the above config should have the effect of permiting the host when its specified IP address is used and denied if any other IP is used. All other addresses are allowed.

hope that helps,


shiva_ial Sun, 06/01/2008 - 23:27
User Badges:


static mac address option with port security will work for you i believe.

The switch supports these types of secure MAC addresses:

•Static secure MAC addresses-These are manually configured by using the switchport port-security mac-address mac-address interface configuration command, stored in the address table, and added to the switch running configuration.

•Dynamic secure MAC addresses-These are dynamically configured, stored only in the address table, and removed when the switch restarts.

•Sticky secure MAC addresses-These are dynamically configured, stored in the address table, and added to the running configuration. If these addresses are saved in the configuration file, when the switch restarts, the interface does not need to dynamically reconfigure them.

check the link


rate if it helps



This Discussion