PurposeCommand or Action
•
(Optional) For burst intervalseconds, specify the consecutive
interval in seconds, over which the interface is monitored for a
high rate of ARP packets. The range is 1 to 15.
•
For rate none, specify no upper limit for the rate of incoming
ARP packets that can be processed.
Returns to global configuration mode.exit
Step 5
(Optional) Enables error recovery from the dynamic ARP inspection
error-disabled state, and configure the dynamic ARP inspection recover
mechanism variables.
Use the following commands:
Step 6
•
errdisable detect cause arp-inspection
•
errdisable recovery cause
arp-inspection
By default, recovery is disabled, and the recovery interval is 300
seconds.
•
errdisable recovery interval interval
For interval interval, specify the time in seconds to recover from the
error-disabled state. The range is 30 to 86400.
Returns to privileged EXEC mode.exit
Step 7
Verifies your settings.Use the following show commands:
Step 8
•
show ip arp inspection interfaces
•
show errdisable recovery
Verifies your entries.show running-config
Example:
Switch# show running-config
Step 9
(Optional) Saves your entries in the configuration file.copy running-config startup-config
Example:
Switch# copy running-config
Step 10
startup-config
Performing Dynamic ARP Inspection Validation Checks
Dynamic ARP inspection intercepts, logs, and discards ARP packets with invalid IP-to-MAC address bindings.
You can configure the switch to perform additional checks on the destination MAC address, the sender and
target IP addresses, and the source MAC address.
Follow these steps to perform specific checks on incoming ARP packets. This procedure is optional.
Consolidated Platform Configuration Guide, Cisco IOS Release 15.2(4)E (Catalyst 2960-X Switches)
1313
Performing Dynamic ARP Inspection Validation Checks
To Next Page
Loading...
Need help?
General
