Table of Contents
Advertisement
Configuring Security
Configuring Dynamic ARP Inspection
STEP 1
STEP 2
STEP 3
STEP 1
STEP 2
STEP 3
STEP 4
Cisco 220 Series Smart Plus Switches Administration Guide Release 1.0.0.x
Configuring ARP Inspection Properties
Use the Properties page to enable dynamic ARP Inspection on the switch and set
ARP packet validation parameters.
To define ARP Inspection properties:
Click Security > ARP Inspection > Properties.
Enter the following information:
•
ARP Inspection Status—Check Enable to enable ARP Inspection on the
switch, or uncheck to disable this feature. By default, ARP Inspection is
disabled.
•
ARP Packet Validation—Defines the following ARP Inspection validation
properties:
Source MAC Address
-
addresses in ARP requests and replies.
Destination MAC Address
-
MAC addresses in ARP requests and replies.
IP Address
-
and replies.
Click Apply. The ARP Inspection properties are defined, and the Running
Configuration is updated.
Configuring ARP Inspection Trusted Interfaces
Use the Interface Settings page to define trusted and unstructed interfaces. These
settings are independent to the trusted interface settings defined for DHCP
Snooping. ARP Inspection is enabled only on untrusted interfaces.
To change the ARP trusted status of an interface:
Click Security > ARP Inspection > Interface Settings.
Select the interface type (Port or LAG), and click Go.
Select an interface, and click Edit.
Enter the following information:
—Check Enable to validate the source MAC
—Check Enable to validate the destination
—Check Enable to validate the IP addresses in ARP requests
16
221
Advertisement
Table of Contents
