Soal:
Turn on dynamic ARP inspection on SW1 for LAN1 subnet. Create access control list that permits static IP address 192.168.10.10 for RADIUS server.
LAN1 is VLAN101
Jawaban:
arp access-list RADIUS
permit ip host 192.168.10.10 mac any
ip arp inspection vlan 101
ip arp inspection filter RADIUS vlan 101
Aktifkan port trusted pada port yang terhubung ke switch lain yang terpercaya untuk mengirimkan informasi ARP seperti DHCP Server.
interface GigabitEthernet1/1
ip arp inspection trust
Reference:
https://networklessons.com/switching/dai-dynamic-arp-inspection
Comments
Post a Comment