PurposeCommand or Action
Specifies the interface connected to the other switch, and enter
interface configuration mode.
Interfaceinterface-id
Example:
Switch(config)# interface
gigabitethernet1/0/1
Step 5
Configures the connection between the switches as trusted. By
default, all interfaces are untrusted.
ip arp inspection trust
Example:
Switch(config-if)#ip arp inspection trust
Step 6
The switch does not check ARP packets that it receives from the
other switch on the trusted interface. It simply forwards the packets.
For untrusted interfaces, the switch intercepts all ARP requests and
responses. It verifies that the intercepted packets have valid
IP-to-MAC address bindings before updating the local cache and
before forwarding the packet to the appropriate destination. The
switch drops invalid packets and logs them in the log buffer
according to the logging configuration specified with the ip arp
inspection vlan logging global configuration command.
Returns to privileged EXEC mode.end
Example:
Switch(config-if)#end
Step 7
Verifies the dynamic ARP inspection configuration on interfaces.show ip arp inspection interfaces
Example:
Step 8
Verifies the dynamic ARP inspection configuration on VLAN.
show ip arp inspection vlan vlan-range
Example:
Switch(config-if)#show ip arp inspection
vlan 1
Step 9
Verifies the DHCP bindings.show ip dhcp snooping binding
Example:
Switch(config-if)#show ip dhcp snooping
binding
Step 10
Checks the dynamic ARP inspection statistics on VLAN.show ip arp inspection statistics vlan
vlan-range
Step 11
Example:
Switch(config-if)#show ip arp inspection
statistics vlan 1
Enters the global configuration mode.configure terminal
Example:
Switch# configure terminal
Step 12
Consolidated Platform Configuration Guide, Cisco IOS Release 15.2(4)E (Catalyst 2960-X Switches)
1310
Configuring Dynamic ARP Inspection in DHCP Environments
To Next Page
Loading...
Need help?
General
