Configuration Guide 609
Configuring Network Security Configuration Examples
Switch_A(config-if)#exit
5) Configure ARP Defend on ports 1/0/1-3.
Switch_A(config)#interface range gigabitEthernet 1/0/1-3
Switch_A(config-if-range)#ip arp inspection
Switch_A(config-if-range)#ip arp inspection limit-rate 15
Switch_A(config-if-range)#end
Switch_A#copy running-config startup-config
Verify the Configuration
Verify the configuration of DHCP Snooping:
Switch_A#show ip dhcp snooping
Global Status: Enable
VLAN ID: 1
Switch_A#show ip dhcp snooping interface
Interface Trusted MAC-Verify Limit-Rate Dec-rate LAG
--------- ------- ---------- ---------- -------- ----
Gi1/0/1 Disable Enable 0 0 N/A
Gi1/0/2 Disable Enable 0 0 N/A
Gi1/0/3 Disable Enable 0 0 N/A
Gi1/0/4 Enable Enable 0 0 N/A
......
Verify the IP-MAC Binding entries:
Switch_A#show ip source binding
U No. Host IP-Addr MAC-Addr VID Port ACL Col.
-- --- ------ ------- -------- --- ---- --- --
1 1 User1 192.168.0.20 74:d3:45:32:6b:8d 1 Gi1/0/1 ARP-D
1 2 User2 192.168.0.21 76:d9:33:56:78:a3 1 Gi1/0/2 ARP-D
1 3 User3 192.168.0.33 88:a9:d4:54:fd:c3 1 Gi1/0/3 ARP-D
To Next Page
Loading...
