Re: Protection against Man-in -d -middle attack

From: Narbik Kocharians <narbikk_at_gmail.com>
Date: Tue, 23 Mar 2010 13:21:08 -0700

Marko,

I have a tested lab, and it works as its advertised.

On Tue, Mar 23, 2010 at 12:36 PM, Marko Milivojevic <markom_at_ipexpert.com>wrote:

> On Tue, Mar 23, 2010 at 19:10, Narbik Kocharians <narbikk_at_gmail.com>
> wrote:
> > Thameem,
> >
> > DHCP snooping must be enabled for DAI to work, unless you have configured
> > the "static" keyword, in which case you don't need the Dhcp snooping, and
> > you are going to rely on the ARP access-list.
>
> Actually, you must have it enabled even in that case.
>
> --
> Marko Milivojevic - CCIE #18427
> Senior Technical Instructor - IPexpert
>
> YES! We include 400 hours of REAL rack
> time with our Blended Learning Solution!
>
> Mailto: markom_at_ipexpert.com
> Telephone: +1.810.326.1444
> Fax: +1.810.454.0130
> Web: http://www.ipexpert.com/
>

-- 
Narbik Kocharians
CCSI#30832, CCIE# 12410 (R&S, SP, Security)
www.MicronicsTraining.com
Sr. Technical Instructor
YES! We take Cisco Learning Credits!
Training And Remote Racks available
Blogs and organic groups at http://www.ccie.net
Received on Tue Mar 23 2010 - 13:21:08 ART

This archive was generated by hypermail 2.2.0 : Thu Apr 01 2010 - 07:26:35 ART