Configure System Information
108
XS708T, XS712Tv2, and XS716T Smart Managed Pro Switch User Manual
The valid IP check is applied only on the sender IP address in ARP packets. In ARP
response packets, the check is applied only on the target IP address.
To configure the optional DAI features:
1. Connect your computer to the same network as the switch.
You can use a WiFi or wired connection to connect your computer to the network, or
connect directly to a switch that is off-network using an Ethernet cable.
2. Launch a web browser.
3. In the address field of your web browser, enter the IP address of the switch.
If you do not know the IP address of the switch, see Change the Default IP Address of the
Switch on page 10.
The login window opens.
4. Enter the switch’s password in the Password field.
The default password is password.
The System Information page displays.
5. Select System> Services > Dynamic ARP Inspection > DAI Configuration.
6. Next to Validate Source MAC, select the Enable radio button.
7. Next to Validate Destination MAC, select the Enable radio button.
8. Next to Validate IP, select the Enable radio button.
9. Click the Apply button.
The updated configuration is sent to the switch. Configuration changes take effect
immediately.
The additional ARP validations are performed on packets received on VLANs that are
enabled for DAI and interfaces configured as untrusted.
Configure DAI on a VLAN
In this example, DAI is enabled on VLAN 1. Ports 1–10 connect end users to the network and
are members of VLAN 1. These ports are configured to limit the maximum number of ARP
packets with a rate limit of 10 packets per second. LAG 1, which is also a member of VLAN 1
and contains ports 11–14, is the trunk port that connects the switch to the data center, so it is
configured as a trusted port.