Cisco Catalyst 3750-X User Manual

25-11
Catalyst 3750-X and 3560-X Switch Software Configuration Guide
OL-21521-01
Chapter 25 Configuring Dynamic ARP Inspection
Configuring Dynamic ARP Inspection
For configuration guidelines for rate limiting trunk ports and EtherChannel ports, see the “Dynamic ARP
Inspection Configuration Guidelines” section on page 25-6.
Beginning in privileged EXEC mode, follow these steps to limit the rate of incoming ARP packets. This
p
rocedure is optional.
To return to the default rate-limit configuration, use the no ip
arp inspection limit interface
configuration command. To disable error recovery for dynamic ARP inspection, use the no errdisable
recovery cause arp-inspection global configuration command.
Command Purpose
Step 1
configure terminal Enter global configuration mode.
Step 2
interface interface-id Specify the interface to be rate-limited, and enter interface configuration
mode.
Step 3
ip arp inspection limit {rate pps [burst
interval seconds] | none}
Limit the rate of incoming ARP requests and responses on the interface.
The default rate is 15 pps on untrusted interfaces and unlimited on
tru
sted interfaces. The burst interval is 1 second.
The keywords have these meanings:
• For rate pps, specify an upper limit for the number of incoming
packets processed per second. The range is 0 to 2048 pps.
• (Optional) For burst interval seconds, specify the consecutive
interval in seconds, over which the interface is monitored for a high
rate of ARP packets.The range is 1 to 15.
• For rate none, specify no upper limit for the rate of incoming ARP
packets that can be processed.
Step 4
exit Return to global configuration mode.
Step 5
errdisable detect cause arp-inspection
and
errdisable recovery cause
ar
p-inspection
and
errdisable recovery interval in
terval
(Optional) Enable error recovery from the dynamic ARP inspection
e
rror-disabled state, and configure the dynamic ARP inspection recover
mechanism variables
By default, recovery is disabled, and the recovery interval is 300
se
conds.
For inter
val interval, specify the time in seconds to recover from the
error-disabled state. The range is 30 to 86400.
Step 6
exit Return to privileged EXEC mode.
Step 7
show ip arp inspection interfaces
show errdisable recovery
Verify your settings.
Step 8
copy running-config startup-config (Optional) Save your entries in the configuration file.

Cisco Catalyst 3750-X Specifications

General

Switching Capacity	160 Gbps
Stacking Bandwidth	64 Gbps
Max Stacking Units	9
Layer Support	Layer 2 and Layer 3
Form Factor	Rack-mountable
DRAM	256 MB
Flash Memory	64 MB
Model	Cisco Catalyst 3750-X Series
Ports	24 or 48 10/100/1000 Ethernet ports
Uplink Interfaces	4 SFP or 2 SFP+
Features	StackWise Plus, EnergyWise
Image	IP Base or IP Services
Operating Temperature	0 to 40°C
Operating Humidity	10 to 85% noncondensing