Port Security Overview Planning port security Configuring port security Lock a MAC to a port-VLAN pair Eavesdrop Prevention is Disabled Blocked unauthorized traffic Overview Configuring Trusted Ports for Dynamic ARP Protection Configuring Additional Validation Checks on ARP Packets Verifying the configuration of dynamic ARP protection Configuring DHCP snooping trusted ports Clearing DHCP snooping table overview clear dhcp-snooping binding clear dhcp-snooping statistics Configuring authorized server addresses Configuring MAC Lockdown Configuring MAC Lockout Configuring instrumentation monitor Displaying port security settings Displaying ARP Packet Statistics Monitoring Dynamic ARP Protection Listing authorized and detected MAC addresses Viewing the current instrumentation monitor configuration Enabling port security eavesdrop-prevention Configuring DHCP snooping Enabling Dynamic ARP protection Enabling Dynamic IP Lockdown Removing MAC Addresses Removing a MAC Address from the Authorized list for a port Clear MAC address table Deploying MAC Lockdown Adding an IP-to-MAC Binding to the DHCP Database Verifying the dynamic IP lockdown configuration Adding a MAC Address to a port Checking for intrusions, listing intrusion alerts, and resetting alert flags (CLI) Using the event log to find intrusion alerts CLI User-based lockout compliance Log Messages