From: Antonio Soares (amsoares@netcabo.pt)
Date: Sat Jul 07 2007 - 15:59:01 ART
In fact the "DHCP Authorized ARP" is made of two steps:
1) Securing ARP Table Entries to DHCP Leases
SUMMARY STEPS
1. enable
2. configure terminal
3. ip dhcp pool pool-name
4. update arp
2) Configuring DHCP Authorized ARP
SUMMARY STEPS
1. enable
2. configure terminal
3. interface type number
4. ip address ip-address mask
5. arp authorized
6. arp timeout seconds
7. end
8. show arp
http://www.cisco.com/univercd/cc/td/doc/product/software/ios123/123newft/123
t/123t_4/gtautarp.htm
Thanks,
Antonio
-----Original Message-----
From: nobody@groupstudy.com [mailto:nobody@groupstudy.com] On Behalf Of
Antonio Soares
Sent: quinta-feira, 28 de Junho de 2007 18:05
To: 'Eric Dobyns'; ccielab@groupstudy.com
Subject: RE: Arp Security
It comes to my mind a conjunction of two commands: "update arp" and "arp
authorized"
http://www.cisco.com/univercd/cc/td/doc/product/software/ios124/124cg/hiad_c
/ch10/hipdhcpa.htm
And don't forget to statically map your routers :)
I didn't find any "ip arp inspection" command...
-----Original Message-----
From: nobody@groupstudy.com [mailto:nobody@groupstudy.com] On Behalf Of Eric
Dobyns
Sent: quinta-feira, 28 de Junho de 2007 17:30
To: ccielab@groupstudy.com
Subject: Arp Security
If I were setting up a dhcp server on a router and wanted to make sure ARP
entries were secure, would I use 'ip arp inspection' on the interface
handling the requests?
This archive was generated by hypermail 2.1.4 : Sat Aug 18 2007 - 08:17:40 ART