From: Mestdagh, Mark [NCSBE - Non JJ] (MMESTDAG@ncsbe.jnj.com)
Date: Wed Oct 20 2004 - 09:50:13 GMT-3
You even do not need the "arp 10.10.10.10 aaaa.aaaa.aaaa arpa
fastethernet0/1" command.
Regards
Mark
> -----Original Message-----
> From: my-ccie-test@libero.it [mailto:my-ccie-test@libero.it]
> Sent: woensdag 20 oktober 2004 14:47
> To: ccielab@groupstudy.com
> Subject: static arp
>
>
> Hi guys,
> I have a question about static arp.
>
> is there any option in the command:
>
> arp 10.10.10.10 aaaa.aaaa.aaaa arpa fastethernet0/1
>
> that drop violating traffic?
>
> suppose I want filter traffic from a specific pair
> mac-address/ip address not using access-list layer2/3.
>
> my configuration is:
>
> interface Fastethernet0/1
> switchport mode access
> switchport access vlan 100
> switchport port-security 1
> switchport port-security mac-address aaaa.aaaa.aaaa
>
>
> arp 10.10.10.10 aaaa.aaaa.aaaa arpa fastethernet0/1
>
>
> the traffic from other ip address or mac-address is dropped?
> how can I verify dropping packets?
>
> thanks
>
> max
>
> ______________________________________________________________
> _________
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html
This archive was generated by hypermail 2.1.4 : Sat Nov 06 2004 - 17:11:50 GMT-3