Layer 3 Forward and ARP Configuration
Chapter 6 Dynamic ARP Inspection Configuration
http://www.level1.com
6-3
ip arp inspection limit-rate 50
!
Interface Ethernet1/0/2
description connect to Other Server
switchport access vlan 10
ip arp inspection limit-rate 50
!
Interface Ethernet1/0/3
description connect to PC
switchport access vlan 10
ip arp inspection limit-rate 50
!
interface Vlan10
ip address 192.168.10.1 255.255.255.0
Explanation: In this case, there are two method of static and dynamic using of DAI.
The ARP packets from the untrusted port will all be transmitted to DHCP monitoring
binding table for checking if they are lawful.
After the client gotten the IP address dynamically, it can be modified to be the static IP
address, but it must be the same IP address to the dynamic one. If modifies to be other IP
address, it cannot be accessed in the network and the switch can send the warning about
the illegal ARP.
