Cisco Systems 2960 Manual De Usuario
21-12
Catalyst 2960 and 2960-S Switch Software Configuration Guide
OL-8603-09
Chapter 21 Configuring Dynamic ARP Inspection
Configuring Dynamic ARP Inspection
To return to the default rate-limit configuration, use the no ip arp inspection limit interface
configuration command. To disable error recovery for dynamic ARP inspection, use the no errdisable
recovery cause arp-inspection global configuration command.
configuration command. To disable error recovery for dynamic ARP inspection, use the no errdisable
recovery cause arp-inspection global configuration command.
Performing Validation Checks
Dynamic ARP inspection intercepts, logs, and discards ARP packets with invalid IP-to-MAC address
bindings. You can configure the switch to perform additional checks on the destination MAC address,
the sender and target IP addresses, and the source MAC address.
bindings. You can configure the switch to perform additional checks on the destination MAC address,
the sender and target IP addresses, and the source MAC address.
Step 5
errdisable recovery cause
arp-inspection interval interval
arp-inspection interval interval
(Optional) Enable error recovery from the dynamic ARP inspection
error-disable state.
error-disable state.
By default, recovery is disabled, and the recovery interval is 300
seconds.
seconds.
For interval interval, specify the time in seconds to recover from the
error-disable state. The range is 30 to 86400.
error-disable state. The range is 30 to 86400.
Step 6
exit
Return to privileged EXEC mode.
Step 7
show ip arp inspection interfaces
show errdisable recovery
Verify your settings.
Step 8
copy running-config startup-config
(Optional) Save your entries in the configuration file.
Command
Purpose