Cisco Catalyst 2960-XR Security Configuration Manual page 228
Ios release 15.0 2 ex1
Hide thumbs
Also See for Catalyst 2960-XR:
- Configuration manual (196 pages) ,
- Configuration manuals (120 pages) ,
- Reference (52 pages)
Table of Contents
Advertisement
Configuring Dynamic ARP Inspection in DHCP Environments
Command or Action
Example:
Step 2
configure terminal
Example:
Switch# configure terminal
Step 3
ip arp inspection vlan vlan-range
Example:
Step 4
Interfaceinterface-id
Example:
Step 5
ip arp inspection trust
Example:
Step 6
end
Example:
Step 7
show ip arp inspection interfacesshow
ip arp inspection vlan vlan-range
Example:
Step 8
show ip dhcp snooping binding
Example:
Step 9
show ip arp inspection statistics vlan
vlan-range
Example:
Catalyst 2960-XR Switch Security Configuration Guide, Cisco IOS Release 15.0(2)EX1
206
Purpose
Enters the global configuration mode.
Enable dynamic ARP inspection on a per-VLAN basis. By default, dynamic
ARP inspection is disabled on all VLANs. For vlan-range, specify a single
VLAN identified by VLAN ID number, a range of VLANs separated by a
hyphen, or a series of VLANs separated by a comma. The range is 1 to
4094. Specify the same VLAN ID for both switches.
Specify the interface connected to the other switch, and enter interface
configuration mode.
Configure the connection between the switches as trusted.
By default, all interfaces are untrusted.
The switch does not check ARP packets that it receives from the other
switch on the trusted interface. It simply forwards the packets.
For untrusted interfaces, the switch intercepts all ARP requests and
responses. It verifies that the intercepted packets have valid IP-to-MAC
address bindings before updating the local cache and before forwarding the
packet to the appropriate destination. The switch drops invalid packets and
logs them in the log buffer according to the logging configuration specified
with the ip arp inspection vlan logging global configuration command. For
more information, see the "Configuring the Log Buffer" section on page
xxx.
Return to privileged EXEC mode.
Verify the dynamic ARP inspection configuration.
Verify the DHCP bindings.
Check the dynamic ARP inspection statistics.
Configuring Dynamic ARP Inspection
OL-29434-01
Advertisement
Table of Contents
