I will turn the question back, what happens when you test it?
Regards, Tyson Scott - CCIE #13513 R&S, Security, and SP Managing Partner / Sr. Instructor - IPexpert, Inc. Mailto: [email protected] Telephone: +1.810.326.1444, ext. 208 Live Assistance, Please visit: www.ipexpert.com/chat eFax: +1.810.454.0130 IPexpert is a premier provider of Self-Study Workbooks, Video on Demand, Audio Tools, Online Hardware Rental and Classroom Training for the Cisco CCIE (R&S, Voice, Security & Service Provider) certification(s) with training locations throughout the United States, Europe, South Asia and Australia. Be sure to visit our online communities at www.ipexpert.com/communities and our public website at www.ipexpert.com <http://www.ipexpert.com/> From: [email protected] [mailto:[email protected]] On Behalf Of Serious CCIE Sent: Thursday, March 03, 2011 8:43 AM To: [email protected] Subject: [OSL | CCIE_Security] IPSG -arp poisoning (back on Again) Hi, Will these do the same job? option#2 will save some time in typing as it applies to the whole vlan/port while option#2 is for an specific port. what are your thoughts? Option#1 ! ip dhcp snooping binding aaa.aaa.aaa vlan 10 11.11.11.11 interface 48 ip arp inspection vlan 10 ! -----------Vs--------------- option#2 ! arp access-list ARP_ACL permit ip host 11.11.11.11 mac host aaa.aaa.aaa ! ip arp inspection filter ARP_ACL vlan 10 ip arp inspection vlan 10
_______________________________________________ For more information regarding industry leading CCIE Lab training, please visit www.ipexpert.com
