Cisco Catalyst 4500 Series Configuration Manual page 41

Configuring Dynamic ARP Inspection
49
C H A P T E R
Configuring DHCP Snooping, IP Source Guard, and IPSG for Static Hosts
50
C H A P T E R
OL-25340-01
About Dynamic ARP Inspection
ARP Cache Poisoning
Purpose of Dynamic ARP Inspection
Interface Trust State, Security Coverage and Network Configuration
Relative Priority of Static Bindings and DHCP Snooping Entries
Logging of Dropped Packets
Rate Limiting of ARP Packets
Port Channels Function
Configuring Dynamic ARP Inspection
Configuring Dynamic ARP Inspection in DHCP Environments
DAI Configuration Example
Switch A
49-7
Switch B
49-9
Configuring ARP ACLs for Non-DHCP Environments
Configuring the Log Buffer
Limiting the Rate of Incoming ARP Packets
Performing Validation Checks
About DHCP Snooping
50-1
Trusted and Untrusted Sources
About the DHCP Snooping Database Agent
Option 82 Data Insertion
Configuring DHCP Snooping
Default Configuration for DHCP Snooping
Enabling DHCP Snooping
Enabling DHCP Snooping on the Aggregation Switch
Enabling DHCP Snooping and Option 82
Enabling DHCP Snooping on Private VLAN
Configuring DHCP Snooping on Private VLAN
Configuring DHCP Snooping with an Ethernet Channel Group
Enabling the DHCP Snooping Database Agent
Limiting the Rate of Incoming DHCP Packets
Configuration Examples for the Database Agent
Example 1: Enabling the Database Agent
Example 2: Reading Binding Entries from a TFTP File
Example 3: Adding Information to the DHCP Snooping Database
Displaying DHCP Snooping Information
49-1
49-1
49-2
49-2
49-4
49-4
49-5
49-5
49-7
49-14
49-16
49-19
50-2
50-2
50-4
50-6
50-7
50-7
50-10
50-12
50-12
50-13
50-13
50-15
50-15
50-18
Software Configuration Guide-Release IOS XE 3.3.0SG and IOS 15.1(1)SG
49-3
49-4
49-5
49-11
50-1
50-9
50-12
50-17
50-18
Contents
xxxix