Re: Protection against Man-in -d -middle attack

On Tue, Mar 23, 2010 at 19:10, Narbik Kocharians <narbikk_at_gmail.com> wrote:
> Thameem,
>
> DHCP snooping must be enabled for DAI to work, unless you have configured
> the "static" keyword, in which case you don't need the Dhcp snooping, and
> you are going to rely on the ARP access-list.

Actually, you must have it enabled even in that case.

--
Marko Milivojevic - CCIE #18427
Senior Technical Instructor - IPexpert
YES! We include 400 hours of REAL rack
time with our Blended Learning Solution!
Mailto: markom_at_ipexpert.com
Telephone: +1.810.326.1444
Fax: +1.810.454.0130
Web: http://www.ipexpert.com/
Blogs and organic groups at http://www.ccie.net