Configuring Security
Configuring Dynamic ARP Inspection
STEP 3
STEP 4
STEP 1
STEP 2
STEP 3
Cisco 220 Series Smart Switches Administration Guide Release 1.1.0.x
Define the VLANs on which ARP Inspection is enabled on the Security > ARP
Inspection > VLAN Settings page. See
Settings
for more details.
View ARP Inspection statistical information on the Security > ARP Inspection >
Statistics page. See
Viewing ARP Inspection Statistics
Configuring ARP Inspection Properties
Use the Properties page to enable dynamic ARP Inspection on the switch and set
ARP packet validation parameters.
To define ARP Inspection properties:
Click Security > ARP Inspection > Properties.
Enter the following information:
•
ARP Inspection Status—Check Enable to enable ARP Inspection on the
switch, or uncheck to disable this feature. By default, ARP Inspection is
disabled.
•
ARP Packet Validation—Defines the following ARP Inspection validation
properties:
-
Source MAC Address
addresses in ARP requests and replies.
Destination MAC Address
-
MAC addresses in ARP replies.
IP Address
-
and replies.
Allow all-zeros IP
-
allow 0.0.0.0 the IP address.
Click Apply. The ARP Inspection properties are defined, and the Running
Configuration is updated.
Configuring ARP Inspection VLAN
—Check Enable to validate the source MAC
—Check Enable to validate the destination
—Check Enable to validate the IP addresses in ARP requests
—If IP address validation is enabled, check Enable to
16
for more details.
229