DAI & IP Source Guard

[taufeeq taufeeq]

Dear All,

Can I configure Dynamic ARP Inspection and IP Source guard for the same VLANs???

Are they compatible with each other or what's the difference between two???

Thanks in Advance,

Best Regards,
Taufeeq?


Sent from Cisco Technical Support iPhone App

[Amit Singh · Accepted solution]

Yes, Check this.

http://www.cisco.com/en/US/docs/switches/lan/catalyst3550/software/release/12.2_25_see/configuration/guide/swdhcp82.html

You need to enable DHCP snooping for all these to work together.

[John Blakley · Accepted solution]

Yes, they can all be configured for the same vlan, and as Amit stated, you'll need to configure dhcp snooping as well. Make sure that you have a plan to deal with static ip addresses though. I've been implementing this for the past week, and I can tell you that there can be some administrative burden. It's not a set-it-and-forget it method.

HTH,
John

*** Please rate all useful posts ***

[paul driver]

Hello

Regards DAI - it can be used with or without validating with DHCP Snooping DB = Static DAI

res

Paul

Please don't forget to rate any posts that have been helpful.

Thanks.

[taufeeq taufeeq]

Folks thank you for your quick help?

Regards,
Taufeeq?

Sent from Cisco Technical Support iPhone App