Enabling local proxy ARP

When the local proxy ARP option is enabled, a switch responds with its MAC address to all ARP request on the VLAN. All IP packets are routed through and forwarded by the switch. The switch prevents broadcast ARP requests from reaching other ports on the VLAN.


Internet control message protocol (ICMP) redirects are disabled on interfaces on which local proxy ARP is enabled.

To enable local proxy ARP, you must first enter VLAN context, for example:

switch(config) vlan 1

Then enter the command to enable local proxy ARP:

switch(vlan-1)ip local-proxy-arp


[no] ip local-proxy-arp

Enables the local proxy ARP option. You must be in VLAN context to execute this command.

When enabled on a VLAN, the switch responds to all ARP requests received on the VLAN ports with its own hardware address.

The no option disables the local proxy ARP option.

Default: Disabled

Execute the show ip command to see which VLANs have local proxy ARP enabled.

Local proxy ARP is enabled on the default VLAN

switch(vlan-1)# show ip

 Internet (IP) Service

  IP Routing : Disabled

  Default TTL     : 64
  Arp Age        : 20
  Domain Suffix   :
  DNS server      :

  VLAN                 | IP Config  IP Address      Subnet Mask     Proxy ARP
  -------------------- + ---------- --------------- --------------- ---------
  DEFAULT_VLAN         | DHCP/Bootp   Yes Yes
  VLAN2100             | Disabled