DHCP snooping and Dynamic Arp inspection

hamsofiane · ‎01-08-2010

Hello averybody ,

we must implement the services:
- DHCP snooping
- Dynamic Arp Inspection

The target in terms of equipment:

- 6506 MSFC ((s72033_rp-IPSERVICESK9_WAN-M), Version 12.2 (33) SXH, RELEASE SOFTWARE (fc5))
- Catalyst 4500 L3 Switch Software (cat4500-IPBASEK9-M), Version 12.2 (37) SG1, RELEASE SOFTWARE (fc2)
Because these services will conduct an analysis package by package dhcp and arp, I would have a feedback to assess whether edge effects are known (such significant increase CPU load buffers, CEF focntionnelle not for this requirement ....)

Thank you for your help.

sachinraja · ‎01-08-2010

Hi Hamsofiane

I really dont think these features will increase the CPU dramatically.. CEF is not mandatory for these features, but have CEF turned ON in Layer 3 devices which helps in other ways..

More than worrying about the resource utilization, you should concentrate on a concrete design and troubleshooting procedures when implementing these technologies on the network.. these can become quite complicated when implementing with technologies like 802.1x , NAC etc.. in any case you shouldnt be having major issues configuring them, since there are tons of documents available on CCO, and ofcourse you have got Netpro users who would help you...

Raj