CHAPTER 14
Configuring Dynamic ARP Inspection
•
Finding Feature Information, page 243
•
Restrictions for Dynamic ARP Inspection, page 243
•
Understanding Dynamic ARP Inspection, page 245
•
Default Dynamic ARP Inspection Configuration, page 248
•
Relative Priority of ARP ACLs and DHCP Snooping Entries, page 249
•
Configuring ARP ACLs for Non-DHCP Environments , page 249
•
Configuring Dynamic ARP Inspection in DHCP Environments, page 252
•
Limiting the Rate of Incoming ARP Packets, page 255
•
Performing Dynamic ARP Inspection Validation Checks, page 257
•
Monitoring DAI, page 259
•
Verifying the DAI Configuration, page 260
•
Additional References, page 260
Finding Feature Information
Your software release may not support all the features documented in this module. For the latest caveats and
feature information, see Bug Search Tool and the release notes for your platform and software release. To
find information about the features documented in this module, and to see a list of the releases in which each
feature is supported, see the feature information table at the end of this module.
Use Cisco Feature Navigator to find information about platform support and Cisco software image support.
To access Cisco Feature Navigator, go to http://www.cisco.com/go/cfn. An account on Cisco.com is not
required.
Restrictions for Dynamic ARP Inspection
This section lists the restrictions and guidelines for configuring Dynamic ARP Inspection on the switch.
Catalyst 2960-X Switch Security Configuration Guide, Cisco IOS Release 15.0(2)EX
OL-29048-01 243