[c-nsp] Blocking arp / DAI

Lukas Tribus luky-37 at hotmail.com
Fri Jun 20 09:37:23 EDT 2014


> Hi,
>
> I have 3560G switches configured for dhcp snooping, and I can see
> that the switches have a database of dhcp bindings per interface. I am
> wondering if there might be some way to configure the switch to block
> all traffic (arp for example) for addresses not in the binding database?
> eg: Can I prevent the switch from forwarding ARP for addresses that are
> not in the binding database?

What do you need exactly that DAI cannot achieve?



Lukas 		 	   		  


More information about the cisco-nsp mailing list