Task � Dynamic ARP Inspection

• Configure ARP inspection in VLAN 123
  • Log all packets that match the content of the snooping database (previous task)
• Protect the switch�s CPU by rate-limiting ARP packets coming from R3
• Don�t allow more than 10 packets per second
• At the end of this task R1, R2 & R3 should be able to ping each other after a reboot

Solutions

SW1
ip arp inspection vlan 123
ip arp inspection vlan 123 logging dhcp-bindings all
!
interface g0/1
 ip arp inspection trust
!
wr memory

SW2
ip arp inspection vlan 123
ip arp inspection vlan 123 logging dhcp-bindings all
!
interface g1/0
 ip arp inspection trust
interface g0/3
 ip arp inspection limit rate 10
!
wr memory