Configure System Information
130
S3300 Smart Managed Pro Switch
since the target MAC address is unspecified in ARP requests. You can also enable IP
address checking. When this option is enabled, DAI drops ARP packets with an invalid IP
address. The following IP addresses are considered invalid:
• 0.0.0
.0
• 255.2
55.255.255
• All I
P multicast addresses
• All class E a
ddresses (240.0.0.0/4)
• Loop
back addresses (in the range 127.0.0.0/8)
The valid IP check is applied only on the sender IP ad
dress in ARP packets. In ARP
response packets, the check is applied only on the target IP address.
To configure the optional DAI features:
1. Select System> Servi
ces > Dynamic ARP Inspection > DAI Configuration.
2. Next to V
alidate Source MAC, select the Enable radio button.
3. Next to V
alidate Destination MAC, select the Enable radio button.
4. Next to V
alidate IP, select the Enable radio button.
Figure 78. DAI Global Configuration
5. Click the Apply button.
The additional ARP validations are performed on p
ackets received on VLANs that are
enabled for DAI and interfaces configured as untrusted.
Display DAI Statistics
To display and clear the DAI statistics per VLAN:
1. Select System> Servi
ces > Dynamic ARP Inspection > Statistics.
To Next Page
Loading...
