Cisco Catalyst 2960-XR Security Configuration Manual page 11

Contents
C H A P T E R 1 3
C H A P T E R 1 4
OL-29434-01
Configuring DHCP Server Port-Based Address Allocation
Information About Configuring DHCP Server Port-Based Address Allocation
Default Port-Based Address Allocation Configuration
Port-Based Address Allocation Configuration Guidelines
Enabling the DHCP Snooping Binding Database Agent
Enabling DHCP Server Port-Based Address Allocation
Monitoring DHCP Server Port-Based Address Allocation
Configuring IP Source Guard
Finding Feature Information
Information About IP Source Guard
IP Source Guard
185
IP Source Guard for Static Hosts
IP Source Guard Configuration Guidelines
How to Configure IP Source Guard
Enabling IP Source Guard
Configuring IP Source Guard for Static Hosts on a Layer 2 Access Port
Monitoring IP Source Guard
Configuring Dynamic ARP Inspection
Finding Feature Information
Restrictions for Dynamic ARP Inspection
Understanding Dynamic ARP Inspection
Interface Trust States and Network Security
Rate Limiting of ARP Packets
Relative Priority of ARP ACLs and DHCP Snooping Entries
Logging of Dropped Packets
Default Dynamic ARP Inspection Configuration
Restrictions for Dynamic ARP Inspection
Relative Priority of ARP ACLs and DHCP Snooping Entries
Configuring ARP ACLs for Non-DHCP Environments
Configuring Dynamic ARP Inspection in DHCP Environments
How to Limit the Rate of Incoming ARP Packets
How to Perform Validation Checks
Monitoring DAI
210
Catalyst 2960-XR Switch Security Configuration Guide, Cisco IOS Release 15.0(2)EX1
185
185
185
186
187
188
188
193
195
195
195
197
198
199
200
200
201
207
209
181
181
181
181
182
183
184
189
200
202
202
205
xi