Configuring DHCP Server Port-Based Address Allocation 181
Information About Configuring DHCP Server Port-Based Address Allocation 181
Default Port-Based Address Allocation Configuration 181
Port-Based Address Allocation Configuration Guidelines 181
Enabling the DHCP Snooping Binding Database Agent 182
Enabling DHCP Server Port-Based Address Allocation 183
Monitoring DHCP Server Port-Based Address Allocation 184
CHAPTER 13
Configuring IP Source Guard 185
Finding Feature Information 185
Information About IP Source Guard 185
IP Source Guard 185
IP Source Guard for Static Hosts 186
IP Source Guard Configuration Guidelines 187
How to Configure IP Source Guard 188
Enabling IP Source Guard 188
Configuring IP Source Guard for Static Hosts on a Layer 2 Access Port 189
Monitoring IP Source Guard 193
CHAPTER 14
Configuring Dynamic ARP Inspection 195
Finding Feature Information 195
Restrictions for Dynamic ARP Inspection 195
Understanding Dynamic ARP Inspection 197
Interface Trust States and Network Security 198
Rate Limiting of ARP Packets 199
Relative Priority of ARP ACLs and DHCP Snooping Entries 200
Logging of Dropped Packets 200
Default Dynamic ARP Inspection Configuration 200
Restrictions for Dynamic ARP Inspection 201
Relative Priority of ARP ACLs and DHCP Snooping Entries 202
Configuring ARP ACLs for Non-DHCP Environments 202
Configuring Dynamic ARP Inspection in DHCP Environments 205
How to Limit the Rate of Incoming ARP Packets 207
How to Perform Validation Checks 209
Monitoring DAI 210
Catalyst 2960-XR Switch Security Configuration Guide, Cisco IOS Release 15.0(2)EX1
OL-29434-01 xi
Contents
To Next Page
Loading...
