Configuring Dynamic ARP Inspection

Configuring DAI consists of the following steps.

  1. Configure inspection ARP entries for hosts on untrusted ports. Refer to Configuring an Inspection ARP Entry.
  2. Enable DAI on a VLAN to inspect ARP packets. Refer to Enabling DAI on a VLAN.
  3. Configure the trust settings of the VLAN members. ARP packets received on trusted ports bypass the DAI validation process. ARP packets received on untrusted ports go through the DAI validation process. Refer to Enabling ARP Inspection Trust on a Port.
  4. Enable DHCP snooping to populate the DHCP snooping IP-to-MAC address binding database.

    Dynamic ARP inspection is disabled by default and the trust setting for ports is by default untrusted.

In this section:

  1. Configuring an Inspection ARP Entry
    Dynamic ARP inspection must be enabled to use static ARP inspection entries.
  2. Enabling DAI on a VLAN
    Dynamic ARP inspection validates ARP packets from the untrusted ports of a VLAN.
  3. Enabling ARP Inspection Trust on a Port
    Dynamic ARP inspection (DAI) trust can be enabled on a port.
  4. Disabling Syslog Messages for DAI
    You can disable syslog messages for Dynamic ARP Inspection (DAI). Syslog messages are enabled by default on RUCKUS ICX devices.
Parent topic: Dynamic ARP Inspection Overview