Cisco Catalyst 2960-X Security Configuration Manual page 12

Contents
C H A P T E R 1 4
C H A P T E R 1 5
Catalyst 2960-X Switch Security Configuration Guide, Cisco IOS Release 15.0(2)EX
xii
IP Source Guard Configuration Guidelines
How to Configure IP Source Guard
Enabling IP Source Guard
Configuring IP Source Guard for Static Hosts on a Layer 2 Access Port
Monitoring IP Source Guard
Additional References
Configuring Dynamic ARP Inspection
Finding Feature Information
Restrictions for Dynamic ARP Inspection
Understanding Dynamic ARP Inspection
Interface Trust States and Network Security
Rate Limiting of ARP Packets
Relative Priority of ARP ACLs and DHCP Snooping Entries
Logging of Dropped Packets
Default Dynamic ARP Inspection Configuration
Relative Priority of ARP ACLs and DHCP Snooping Entries
Configuring ARP ACLs for Non-DHCP Environments
Configuring Dynamic ARP Inspection in DHCP Environments
Limiting the Rate of Incoming ARP Packets
Performing Dynamic ARP Inspection Validation Checks
Monitoring DAI
259
Verifying the DAI Configuration
Additional References
Configuring IEEE 802.1x Port-Based Authentication
Finding Feature Information
Information About 802.1x Port-Based Authentication
Port-Based Authentication Process
Port-Based Authentication Initiation and Message Exchange
Authentication Manager for Port-Based Authentication
Port-Based Authentication Methods
Per-User ACLs and Filter-Ids
Port-Based Authentication Manager CLI Commands
Ports in Authorized and Unauthorized States
237
238
238
241
242
243
243
243
245
246
247
248
248
255
260
260
263
264
268
269
270
239
248
249
249
252
257
263
263
266
268
269
OL-29048-01