Cisco Catalyst 2960-X User Manual

PurposeCommand or Action
Returns to global configuration mode.exit
Step 5
Applies ARP ACL to the VLAN. By default, no defined ARP ACLs are applied
to any VLAN.
ip arp inspection filter arp-acl-name
vlan vlan-range [static]
Step 6
•
For arp-acl-name, specify the name of the ACL created in Step 2.
•
For vlan-range, specify the VLAN that the switches and hosts are in.
You can specify a single VLAN identified by VLAN ID number, a range
of VLANs separated by a hyphen, or a series of VLANs separated by a
comma. The range is 1 to 4094.
•
(Optional) Specify static to treat implicit denies in the ARP ACL as
explicit denies and to drop packets that do not match any previous clauses
in the ACL. DHCP bindings are not used.
If you do not specify this keyword, it means that there is no explicit deny
in the ACL that denies the packet, and DHCP bindings determine whether
a packet is permitted or denied if the packet does not match any clauses
in the ACL.
ARP packets containing only IP-to-MAC address bindings are compared
against the ACL. Packets are permitted only if the access list permits them.
Specifies Switch A interface that is connected to Switch B, and enters the
interface configuration mode.
interface interface-id
Step 7
Configures Switch A interface that is connected to Switch B as untrusted.no ip arp inspection trust
Step 8
By default, all interfaces are untrusted.
For untrusted interfaces, the switch intercepts all ARP requests and responses.
It verifies that the intercepted packets have valid IP-to-MAC address bindings
before updating the local cache and before forwarding the packet to the
appropriate destination. The switch drops invalid packets and logs them in the
log buffer according to the logging configuration specified with the ip arp
inspection vlan logging global configuration command.
Returns to privileged EXEC mode.end
Step 9
Verifies your entries.Use the following show commands:
Step 10
•
show arp access-list acl-name
•
show ip arp inspection vlan
vlan-range
•
show ip arp inspection
interfaces
Catalyst 2960-X Switch Security Configuration Guide, Cisco IOS Release 15.0(2)EX
OL-29048-01 251
Configuring Dynamic ARP Inspection
Configuring ARP ACLs for Non-DHCP Environments

Cisco Catalyst 2960-X Specifications

General

Console port	RJ-45
USB 2.0 ports quantity	2
SFP module slots quantity	4
Installed SFP modules quantity	-
Gigabit Ethernet (copper) ports quantity	48
Basic switching RJ-45 Ethernet ports type	Gigabit Ethernet (10/100/1000)
Power source	AC
Input current	5 A
AC input voltage	100 - 240 V
Power consumption (typical)	60.9 W
Number of power supply units	1
Redundant power supply (RPS) support	Yes
Operating altitude	0 - 3000 m
Non-operating altitude	0 - 4000 m
Storage temperature (T-T)	-25 - 70 °C
Operating temperature (T-T)	-5 - 40 °C
Operating relative humidity (H-H)	10 - 95 %
Switching protocols	UDP, TCP, RADIUS/TACACS+
Number of VLANs	1023
Networking standards	IEEE 802.1ab, IEEE 802.1D, IEEE 802.1p, IEEE 802.1Q, IEEE 802.1s, IEEE 802.1w, IEEE 802.1x, IEEE 802.3, IEEE 802.3ab, IEEE 802.3ad, IEEE 802.3ae, IEEE 802.3af, IEEE 802.3ah, IEEE 802.3at, IEEE 802.3az, IEEE 802.3u, IEEE 802.3x, IEEE 802.3z
Throughput	107.1 Mpps
Jumbo frames	9216
Number of queues	8
MAC address table	16000 entries
Number of static routes	1000
DHCP features	DHCP server
Authentication	MAC-based authentication, Port-based authentication
Security algorithms	802.1x RADIUS, SNMP, SSH
Access Control List (ACL) rules	3
Switch type	Managed
Switch layer	L2/L3
Safety	UL 60950-1, CAN/CSA-C22.2 No. 60950-1, EN 60950-1, IEC 60950-1, AS/NZS 60950-1
Form factor	1U
Product color	Black
Total Power over Ethernet (PoE) budget	370 W
Power over Ethernet (PoE) ports quantity	24
Power over Ethernet plus (PoE+) ports quantity	12
Memory type	DRAM
Noise level	39 dB
Flash memory	128 MB
Internal memory	512 MB
Processor frequency	600 MHz
Mean time between failures (MTBF)	276870 h

Weight and Dimensions

Depth	368 mm
Width	445 mm
Height	45 mm
Weight	5800 g