Multi-VRF Support for DAI

Dynamic ARP Inspection (DAI) supports multiple Virtual Routing and Forwarding (VRFs). You can deploy multiple VRFs on a RUCKUS Ethernet switch. Each VLAN with a Virtual Ethernet (VE) interface is assigned to a VRF.

You can enable DAI on individual VLANs, and assign any interface as the ARP inspection trust interface. If an interface is a tagged port in this VLAN, you can turn on the trust port per VRF, so that traffic intended for other VRF VLANs will not be trusted.

Note: ICX 8100 devices do not support VRFs.

Complete the following steps to configure DAI to support a VRF instance.

  1. Enter global configuration mode. 
    device# configure terminal
  2. Configure DAI on a specified VLAN. 
    device(config)# ip arp inspection vlan 2
  3. Add a static ARP inspection entry for a specific VRF instance. 
    device(config-vrf-one-ipv4)# arp 5.5.5.5 00a2.bbaa.0033 inspection

In this section:

  1. Enabling ARP Inspection Trust on a Port for a Nondefault VRF
    Dynamic ARP inspection (DAI) trust can be enabled on a port for a nondefault VRF instance.
Parent topic: Dynamic ARP Inspection Overview