From: Robert Slaski (robin@atm.com.pl)
Date: Thu Dec 12 2002 - 15:18:04 GMT-3
Adam Crisp wrote:
> vlan acl then, but the ip access-list is the best way (but not allowed!)
>
Well, an idea has come and hit me straight in me head ;-)
Of course static ARP will work, but you have to _disable dynamic ARPs_
on this interface as well.
So here is the complete solution:
(config)# arp 10.10.10.10 AAAA.BBBB.CCCC arpa
(config)# int fa0/1
(config-if)# no arp arpa
(config-if)# switchport port-security
(config-if)# switchport port-security mac-address AAAA.BBBB.CCCC
(config-if)# switchport port-security maximum 1
mikrobi,
-- .
This archive was generated by hypermail 2.1.4 : Fri Jan 17 2003 - 17:21:44 GMT-3