Cisco Catalyst 2928 Software Configuration Manual page 17

Configuring Dynamic ARP Inspection
20
C H A P T E R
OL-23389-01
Configuring DHCP Snooping
Default DHCP Snooping Configuration
DHCP Snooping Configuration Guidelines
Configuring the DHCP Relay Agent
Enabling DHCP Snooping and Option 82
Enabling the DHCP Snooping Binding Database Agent
Displaying DHCP Snooping Information
Understanding IP Source Guard
Source IP Address Filtering
Source IP and MAC Address Filtering
IP Source Guard for Static Hosts
Configuring IP Source Guard
Default IP Source Guard Configuration
IP Source Guard Configuration Guidelines
Enabling IP Source Guard
Configuring IP Source Guard for Static Hosts on a Layer 2 Access Port
Displaying IP Source Guard Information
Understanding DHCP Server Port-Based Address Allocation
Configuring DHCP Server Port-Based Address Allocation
Default Port-Based Address Allocation Configuration
Port-Based Address Allocation Configuration Guidelines
Enabling DHCP Server Port-Based Address Allocation
Displaying DHCP Server Port-Based Address Allocation
Understanding Dynamic ARP Inspection
Interface Trust States and Network Security
Rate Limiting of ARP Packets
Relative Priority of ARP ACLs and DHCP Snooping Entries
Logging of Dropped Packets
Configuring Dynamic ARP Inspection
Default Dynamic ARP Inspection Configuration
Dynamic ARP Inspection Configuration Guidelines
Configuring Dynamic ARP Inspection in DHCP Environments
Configuring ARP ACLs for Non-DHCP Environments
Limiting the Rate of Incoming ARP Packets
Performing Validation Checks
Configuring the Log Buffer
19-8
19-8
19-9
19-10
19-11
19-13
19-13
19-14
19-14
19-15
19-15
19-16
19-16
19-16
19-21
19-25
20-1
20-1
20-3
20-4
20-4
20-5
20-5
20-6
20-10
20-11
20-12
Catalyst 2928 Switch Software Configuration Guide
19-12
19-18
19-21
19-22
19-22
19-22
19-23
20-4
20-7
20-8
Contents
xvii