Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

DAI and static addresses

All,

Say I have a core switch at 192.168.100.5, and I have a user add another switch on the network at their desk that's also addressed at 192.168.100.5. Is the best way to handle the situation by using dynamic arp inspection to shut down the port, or is dhcp snooping the best way?

We want to avoid having someone bring our core down. :)

Thanks,

John

HTH, John *** Please rate all useful posts ***
1 ACCEPTED SOLUTION

Accepted Solutions
Hall of Fame Super Bronze

Re: DAI and static addresses

You implement DAI along with ip arp inspection filter http://www.cisco.com/en/US/docs/ios/ipaddr/command/reference/iad_arp.html#wp1012267 for static IP assignment

and DAI with DHCP snooping for dynamic IP assignment.

More reading material

http://www.cisco.com/en/US/docs/switches/lan/catalyst6500/ios/12.2SX/configuration/guide/dynarp.html#wpmkr1047165

__

Edison.

2 REPLIES
Hall of Fame Super Bronze

Re: DAI and static addresses

You implement DAI along with ip arp inspection filter http://www.cisco.com/en/US/docs/ios/ipaddr/command/reference/iad_arp.html#wp1012267 for static IP assignment

and DAI with DHCP snooping for dynamic IP assignment.

More reading material

http://www.cisco.com/en/US/docs/switches/lan/catalyst6500/ios/12.2SX/configuration/guide/dynarp.html#wpmkr1047165

__

Edison.

New Member

Re: DAI and static addresses

Hi John

Both dynamic arp inspection and ip source guard utilize dhcp snooping, In short,use dynamic arp inspection to prevent users from changing their mac-addreses and use ip source guard to prevent illegal IP addresses from being used.

Basically arp inspection protects at layer 2 and ip source guard at layer 3.

Check the following link;

http://www.cisco.com/en/US/docs/switches/lan/catalyst3560/software/release/12.2_25_se/configuration/guide/swdhcp82.html

547
Views
0
Helpful
2
Replies