Cisco Catalyst 2960-X Security Configuration Manual page 280

Limiting the Rate of Incoming ARP Packets
SUMMARY STEPS
1. enable
2. configure terminal
3. interface interface-id
4. ip arp inspection limit {rate pps [burst interval seconds] | none}
5. exit
6. Use the following commands:
7. exit
8. Use the following show commands:
9. show running-config
10. copy running-config startup-config
DETAILED STEPS
Command or Action
Step 1 enable
Example:
Switch> enable
Step 2
configure terminal
Example:
Switch# configure terminal
Step 3 interface interface-id
Step 4 ip arp inspection limit {rate pps [burst
interval seconds] | none}
Catalyst 2960-X Switch Security Configuration Guide, Cisco IOS Release 15.0(2)EX
256
• errdisable detect cause arp-inspection
• errdisable recovery cause arp-inspection
• errdisable recovery interval interval
• show ip arp inspection interfaces
• show errdisable recovery
Purpose
Enables privileged EXEC mode. Enter your password if prompted.
Enters the global configuration mode.
Specifies the interface to be rate-limited, and enter interface
configuration mode.
Limits the rate of incoming ARP requests and responses on the
interface. The default rate is 15 pps on untrusted interfaces and
unlimited on trusted interfaces. The burst interval is 1 second.
The keywords have these meanings:
• For ratepps, specify an upper limit for the number of incoming
packets processed per second. The range is 0 to 2048 pps.
Configuring Dynamic ARP Inspection
OL-29048-01