mac

Commands for Preventing ARP Spoofing
294
still be timeout even if the switch keeps sending Request/Reply messages.
Example:
Switch(Config-if-Vlan1)# ip arp-security learnprotect
Switch(config)# ip arp-security learnprotect
23.4 ipv6 nd-security learnprotect
This command is not supported by the switch.
23.5 ip arp-security convert
Command: ip arp-security convert
Function: Change all of dynamic ARP to static ARP.
Parameter: None
Command Mode: Global Mode/ Interface configuration
Usage Guide: This command will convert the dynamic ARP entries to static ones, which,
in combination with disabling automatic learning, can prevent ARP binding. Once
implemented, this command will lose its effect.
Example:
Switch(Config-if-Vlan1)#ip arp -security convert
Switch(config)#ip arp -security convert
23.6 ipv6 nd-security convert
This command is not supported by the switch.
23.7 clear ip arp dynamic
Command: clear ip arp dynamic
Function: Clear all of dynamic ARP on interface.
Parameter: None
Command Mode: Interface Configuration
Usage Guide: This command will clear dynamic entries before binding ARP. Once
implemented, this command will lose its effect.
Example:
Switch(Config-if-Vlan1)#clear ip arp dynamic