Contents
43
Software Configuration Guide—Release IOS XE 3.6.0E and IOS 15.2(2)E
OL-30933-01
Default Configuration 49-11
Enabling Layer 2 Control Packet QoS 49-12
Disabling Layer 2 Control Packet QoS 49-13
Layer 2 Control Packet QoS Configuration Examples 49-14
Layer 2 Control Packet QoS Guidelines and Restrictions 49-16
Policing IPv6 Control Traffic 49-16
Configuring Dynamic ARP Inspection 50-1
About Dynamic ARP Inspection 50-1
ARP Cache Poisoning 50-2
Purpose of Dynamic ARP Inspection 50-2
Interface Trust State, Security Coverage and Network Configuration 50-3
Relative Priority of Static Bindings and DHCP Snooping Entries 50-4
Logging of Dropped Packets 50-4
Rate Limiting of ARP Packets 50-4
Port Channels Function 50-5
Configuring Dynamic ARP Inspection 50-5
Configuring Dynamic ARP Inspection in DHCP Environments 50-5
DAI Configuration Example 50-7
Switch A 50-7
Switch B 50-9
Configuring ARP ACLs for Non-DHCP Environments 50-11
Configuring the Log Buffer 50-14
Limiting the Rate of Incoming ARP Packets 50-16
Performing Validation Checks 50-19
Configuring DHCP Snooping, IP Source Guard, and IPSG for Static Hosts 51-1
About DHCP Snooping 51-1
Trusted and Untrusted Sources 51-2
About the DHCP Snooping Database Agent 51-2
Option 82 Data Insertion 51-4
Configuring DHCP Snooping 51-6
Default Configuration for DHCP Snooping 51-7
Enabling DHCP Snooping 51-7
Enabling DHCP Snooping on the Aggregation Switch 51-9
Enabling DHCP Snooping and Option 82 51-10
Enabling DHCP Snooping on Private VLAN 51-12
Configuring DHCP Snooping on Private VLAN 51-12
Configuring DHCP Snooping with an Ethernet Channel Group 51-12
Enabling the DHCP Snooping Database Agent 51-13