Finding Feature Information; Restrictions For Dynamic Arp Inspection - Cisco Catalyst 2960-X Security Configuration Manual

Configuring Dynamic ARP Inspection
•
•
•
•
•
•
•
•
•
•
•
•

Finding Feature Information

Your software release may not support all the features documented in this module. For the latest caveats and
feature information, see Bug Search Tool and the release notes for your platform and software release. To
find information about the features documented in this module, and to see a list of the releases in which each
feature is supported, see the feature information table at the end of this module.
Use Cisco Feature Navigator to find information about platform support and Cisco software image support.
To access Cisco Feature Navigator, go to http://www.cisco.com/go/cfn. An account on Cisco.com is not
required.

Restrictions for Dynamic ARP Inspection

This section lists the restrictions and guidelines for configuring Dynamic ARP Inspection on the switch.
OL-29048-01
Finding Feature Information, page 243
Restrictions for Dynamic ARP Inspection, page 243
Understanding Dynamic ARP Inspection, page 245
Default Dynamic ARP Inspection Configuration, page 248
Relative Priority of ARP ACLs and DHCP Snooping Entries, page 249
Configuring ARP ACLs for Non-DHCP Environments , page 249
Configuring Dynamic ARP Inspection in DHCP Environments, page 252
Limiting the Rate of Incoming ARP Packets, page 255
Performing Dynamic ARP Inspection Validation Checks, page 257
Monitoring DAI, page 259
Verifying the DAI Configuration, page 260
Additional References, page 260
Catalyst 2960-X Switch Security Configuration Guide, Cisco IOS Release 15.0(2)EX
14
C H A P T E R
243