ARP-protection / Dynamic IP lockdown choice

[Jaap Laaij]

Hi all,

Is Dynamic IP-lockdown an improved substitution for Arp-protection?
Or do you have to use them together?

Thanx Jaap

[Natasha Samoylenko]

ARP protection check only ARP packets.
Dynamic IP lockdown check source IP address in all packets.

You can use them together, but they do different things.

ARP protection can protect you from attack, which use ARP protocol, like ARP spoofing.

Dynamic IP lockdown allow you to check source IP address of all packets on port. They check according to DHCP snooping binding table or static mapping

[Jaap Laaij]

Thanx Natasha