Cisco Catalyst 2960 Series, Configuration Manual

Page: 1393 / 2288

Purpose Command or Action
Enters the global configuration mode. configure terminal
Example:
Switch#
configure terminal
Step 13
Limiting the Rate of Incoming ARP Packets
The switch CPU performs dynamic ARP inspection validation checks; therefore, the number of incoming
ARP packets is rate-limited to prevent a denial- of-service attack.
When the rate of incoming ARP packets exceeds the configured limit, the switch places the port in the
error-disabled state. The port remains in that state until you enable error-disabled recovery so that ports
automatically emerge from this state after a specified timeout period.
Unless you configure a rate limit on an interface, changing the trust state of the interface also changes its
rate limit to the default value for that trust state. After you configure the rate limit, the interface retains
the rate limit even when its trust state is changed. If you enter the
no ip arp inspection limit
interface
configuration command, the interface reverts to its default rate limit.
Note
Follow these steps to limit the rate of incoming ARP packets. This procedure is optional.
Consolidated Platform Configuration Guide, Cisco IOS Release 15.2(4)E (Catalyst 2960-X Switches)
1311
Limiting the Rate of Incoming ARP Packets