Dec 1, 2018

Signal up for Kevin’s dwell and on the web “CCNP R/S Swap (300-115)
Crash Course,” remaining done Dec. 17, 18, & 19, 2018 with the
subsequent backlink:

http://little bit.ly/switch-dec-18

In this episode of “The Broadcast Storm,” you can expect to find out how to develop
on the DHCP Snooping configuration (coated in the previous episode) to
guard your network from IP spoofing (originating on a regional
subnet) and a gratuitous ARP person-in-the-center attack.

As promised in this episode, this is are sample configurations
for both equally IP Source Guard and Dynamic ARP Inspection:

IP Source GUARD Instance:

SW1# conf time period

SW1(config)#int range fa /2-24

SW1(config-if-vary)#ip verify source

SW1(config-if-range)#conclusion

SW1#

 

DYNAMIC ARP INSPECTION Illustration:

SW1# conf expression

SW1(config)#ip arp inspection vlan 1

SW1(config)#int gig /1

SW1(config-if)#ip arp inspection have faith in

SW1(config-if)#int variety fa 1//13-14

SW1(config-if-selection)#ip arp inspection have confidence in

SW1(config-if-variety)#conclude

SW1#