Cisco SGE2000 - Cisco - Gigabit Switch Administration Guide

Configuring Device Security
Defining Dynamic ARP Inspection
Cisco Small Business SFE/SGE Managed Switches Administration Guide 148
4
Add ARP List Page
In addition to the fields in the ARP Inspection List Page, the Add ARP List Page
contains the additional field:
• List Name — Specifies a name for the new ARP list.
STEP 3 Define the fields.
STEP 4 Click Apply. The new ARP Inspection List is added, and the device is updated.
Assigning ARP Inspection VLAN Settings
The ARP Inspection VLAN Settings Page contains fields for enabling ARP
Inspection on VLANs. In the Enabled VLAN table, users assign static ARP
Inspection Lists to enabled VLANs. When a packet passes through an untrusted
interface which is enabled for ARP Inspection, the device performs the following
checks in order:
• Determines if the packet’s IP address and MAC address exist in the static ARP
Inspection list. If the addresses match, the packet passes through the interface.
• If the device does not find a matching IP address, but DHCP Snooping is
enabled on the VLAN, the device checks the DHCP Snooping database for the
IP address-VLAN match. If the entry exists in the DHCP Snooping database, the
packet passes through the interface.
• If the packet’s IP address is not listed in the ARP Inspection List or the DHCP
Snooping database, the device rejects the packet.
To define ARP Inspection on VLANs:

Cisco SGE2000 - Cisco - Gigabit Switch Specifications

General

Form Factor	Rack-mountable
Switching Capacity	48 Gbps
Forwarding Rate	35.7 Mpps
Layer	Layer 2
Power Supply	Internal
Management	Web-based, SNMP, CLI
MAC Address Table Size	8000 entries
VLANs	256
Features	Quality of Service (QoS), IGMP snooping, Port mirroring
Dimensions (W x D x H)	440 x 257 x 44 mm (17.3 x 10.1 x 1.73 in)
Operating Temperature	0°C to 40°C (32°F to 104°F)
Storage Temperature	-20 to 70°C (-4 to 158°F)
Relative Humidity	10% to 90% non-condensing
Standards Compliance	IEEE 802.3, IEEE 802.3u, IEEE 802.3ab, IEEE 802.3x