Table of Contents
Advertisement
Configuring Dynamic ARP Inspection
How to Configure Dynamic ARP Inspection
Command
6.
interface interface-id
7.
no ip arp inspection trust
8.
end
Limiting the Rate of Incoming ARP Packets
Command
1.
configure terminal
2.
interface interface-id
3.
ip arp inspection limit {rate pps [burst
interval seconds] | none}
4.
exit
5.
errdisable recovery cause
arp-inspection interval interval
6.
exit
Purpose
Specifies the Switch A interface that is connected to Switch B,
and enters interface configuration mode.
Configures the Switch A interface that is connected to Switch B
as untrusted.
By default, all interfaces are untrusted.
For untrusted interfaces, the switch intercepts all ARP requests
and responses. It verifies that the intercepted packets have
valid IP-to-MAC address bindings before updating the local
cache and before forwarding the packet to the appropriate
destination. The switch drops invalid packets and logs them in
the log buffer according to the logging configuration specified
with the ip arp inspection vlan logging global configuration
command.
Returns to privileged EXEC mode.
Purpose
Enters global configuration mode.
Specifies the interface to be rate-limited, and enters interface
configuration mode.
Limits the rate of incoming ARP requests and responses on the
interface.
The default rate is 15 pps on untrusted interfaces and unlimited on
trusted interfaces. The burst interval is 1 second.
rate pps—Specifies an upper limit for the number of incoming
packets processed per second. The range is 0 to 2048 pps.
(Optional) burst interval seconds—Specifies the consecutive
interval in seconds, over which the interface is monitored for a high
rate of ARP packets. The range is 1 to 15.
rate none—Specifies no upper limit for the rate of incoming ARP
packets that can be processed.
Returns to global configuration mode.
(Optional) Enables error recovery from the DAI error-disabled state.
By default, recovery is disabled, and the recovery interval is 300
seconds.
interval interval—Specifies the time in seconds to recover from the
error-disabled state. The range is 30 to 86400.
Returns to privileged EXEC mode.
412
- Quick Links:
- Configuration Overview
Hide quick links:
Advertisement
Chapters
Table of Contents
Troubleshooting
