Verifying and Troubleshooting IPv6 Snooping 385
Configuration Examples 386
Example: IPv6 RA Guard Configuration 386
Example: Configuring DHCP—DHCPv6 Guard 386
Example: Configuring IPv6 First-Hop Security Binding Table 386
Example: Configuring IPv6 Snooping 387
Additional References for IPv6 First-Hop Security 387
Configuring Dynamic ARP Inspection 389
CHAPTER 16
About DAI 389
ARP 389
ARP Spoofing Attacks 389
DAI and ARP Spoofing Attacks 390
Interface Trust States and Network Security 391
Logging DAI Packets 392
Licensing Requirements for DAI 392
Prerequisites for DAI 392
Guidelines and Limitations for DAI 393
Default Settings for DAI 393
Configuring DAI 394
Enabling or Disabling DAI on VLANs 394
Configuring the DAI Trust State of a Layer 2 Interface 395
Enabling or Disabling Additional Validation 396
Configuring the DAI Logging Buffer Size 397
Configuring DAI Log Filtering 398
Verifying the DAI Configuration 399
Monitoring and Clearing DAI Statistics 399
Configuration Examples for DAI 400
Two Devices Support DAI 400
Configuring Device A 400
Configuring Device B 402
Additional References for DAI 404
Related Documents 404
Standards 404
Cisco Nexus 9000 Series NX-OS Security Configuration Guide, Release 9.x
xviii
Contents
To Next Page
Loading...
