Such a feature exists for CAM table entries (using the CISCO-MAC-NOTIFICATION-MIB), but not for ARP entries. You could create such a notification, though, by using the Embedded Event Manager. You could write an EEM Tcl policy which periodically checks the ARP table for changes, and sends a trap indicating a change has occurred, and even include the new entry data.
Potentially, yes. It would depend on the size of the table, and frequency of the EEM policy. Testing out a solution in the lab would be a must. There is one tool in IOS that would help with implementing this feature. You could dump the arp table to a file on flash, then use "show archive config differences" to diff the current table to the last run table. Then iterate through the modified lines to generate traps.
Hi everyone, I would like to thank you in advance for any help you can provide a newcomer like myself!
Im studying the 100-105 book by Odom and am currently on the topic of Port security. I purchased a used 2960 and I'm trying to follow a...
While deploying a number of 18xx/2802/3802 model access points (APs), which run AP-COS as their operating platform. It can be observed on some occasions that while many of their access points were able to join the fabric WLC withou...