Cisco Catalyst 250 Series User Manual

PurposeCommand or Action
•
(Optional) For burst intervalseconds, specify the consecutive
interval in seconds, over which the interface is monitored for a
high rate of ARP packets. The range is 1 to 15.
•
For rate none, specify no upper limit for the rate of incoming
ARP packets that can be processed.
Returns to global configuration mode.exit
Step 5
(Optional) Enables error recovery from the dynamic ARP inspection
error-disabled state, and configure the dynamic ARP inspection recover
mechanism variables.
Use the following commands:
Step 6
•
errdisable detect cause arp-inspection
•
errdisable recovery cause
arp-inspection
By default, recovery is disabled, and the recovery interval is 300
seconds.
•
errdisable recovery interval interval
For interval interval, specify the time in seconds to recover from the
error-disabled state. The range is 30 to 86400.
Returns to privileged EXEC mode.exit
Step 7
Verifies your settings.Use the following show commands:
Step 8
•
show ip arp inspection interfaces
•
show errdisable recovery
Verifies your entries.show running-config
Example:
Switch# show running-config
Step 9
(Optional) Saves your entries in the configuration file.copy running-config startup-config
Example:
Switch# copy running-config
Step 10
startup-config
Performing Dynamic ARP Inspection Validation Checks
Dynamic ARP inspection intercepts, logs, and discards ARP packets with invalid IP-to-MAC address bindings.
You can configure the switch to perform additional checks on the destination MAC address, the sender and
target IP addresses, and the source MAC address.
Follow these steps to perform specific checks on incoming ARP packets. This procedure is optional.
Catalyst 2960-X Switch Security Configuration Guide, Cisco IOS Release 15.0(2)EX
OL-29048-01 257
Configuring Dynamic ARP Inspection
Performing Dynamic ARP Inspection Validation Checks

Cisco Catalyst 250 Series Specifications

General

Brand	Cisco
Model	Catalyst 250 Series
Category	Switch
Language	English