Contents
44
Software Configuration Guide—Release IOS XE 3.6.0E and IOS 15.2(2)E
OL-30933-01
Limiting the Rate of Incoming DHCP Packets 51-13
Configuration Examples for the Database Agent 51-15
Example 1: Enabling the Database Agent 51-15
Example 2: Reading Binding Entries from a TFTP File 51-17
Example 3: Adding Information to the DHCP Snooping Database 51-18
Displaying DHCP Snooping Information 51-18
Displaying a Binding Table 51-19
Displaying the DHCP Snooping Configuration 51-19
About IP Source Guard 51-19
Configuring IP Source Guard 51-20
Configuring IP Source Guard on Private VLANs 51-22
Displaying IP Source Guard Information 51-22
Displaying IP Source Binding Information 51-23
Configuring IP Source Guard for Static Hosts 51-24
About IP Source Guard for Static Hosts 51-24
Configuring IPSG for Static Hosts on a Layer 2 Access Port 51-25
Configuring IPSG for Static Hosts on a PVLAN Host Port 51-28
Configuring Network Security with ACLs 52-1
About ACLs 52-2
Overview 52-2
Supported Features That Use ACLs 52-3
Router ACLs 52-3
Port ACLs 52-4
Dynamic ACLs 52-5
VLAN Maps 52-5
Hardware and Software ACL Support 52-6
Troubleshooting High CPU Due to ACLs 52-6
Selecting Mode of Capturing Control Packets 52-7
Guidelines and Restrictions 52-8
Selecting Control Packet Capture 52-8
TCAM Programming and ACLs 52-10
Layer 4 Operators in ACLs 52-10
Restrictions for Layer 4 Operations 52-10
Configuration Guidelines for Layer 4 Operations 52-11
How ACL Processing Impacts CPU 52-12
Configuring Unicast MAC Address Filtering 52-13
Configuring Named MAC Extended ACLs 52-14