Cisco WS-SUP32-GE-3B - Supervisor Engine 32 Software Configuration Manual page 18

Contents
Configuring Sticky ARP
Configuring DHCP Snooping
Overview of DHCP Snooping
Default Configuration for DHCP Snooping
DHCP Snooping Configuration Guidelines and Restrictions
Configuring DHCP Snooping
Configuring Dynamic ARP Inspection
Understanding DAI
Default DAI Configuration
DAI Configuration Guidelines and Restrictions
Configuring DAI
Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY
xviii
Traffic Classification Guidelines
Sample Basic ACLs for CoPP Traffic Classification
33-25
34-1
34-1
DHCP Snooping Option-82 Data Insertion
Overview of the DHCP Snooping Database Agent
34-7
Enabling DHCP Snooping Globally
Enabling DHCP Option-82 Data Insertion
Enabling the DHCP Option 82 on Untrusted Port Feature
Enabling DHCP Snooping MAC Address Verification
Enabling DHCP Snooping on VLANs
Configuring the DHCP Trust State on Layer 2 LAN Interfaces
Configuring DHCP Snooping Rate Limiting on Layer 2 LAN Interfaces
Configuring the DHCP Snooping Database Agent
Configuration Examples for the Database Agent
Displaying a Binding Table
35-1
Understanding ARP
35-1
Understanding ARP Spoofing Attacks
Understanding DAI and ARP Spoofing Attacks
Interface Trust States and Network Security
Rate Limiting of ARP Packets
Relative Priority of ARP ACLs and DHCP Snooping Entries
Logging of Dropped Packets
35-5
35-6
Enabling DAI on VLANs
35-7
Configuring the DAI Interface Trust State
33-23
33-24
34-2
34-4
34-5
34-6
34-7
34-8
34-9
34-9
34-12
34-13
34-16
35-1
35-2
35-2
35-3
35-4
35-4
35-5
35-7
34-8
34-11
34-12
35-4
OL-11439-03