DAI Configuration

Use the DAI Configuration page to configure global DAI settings.

To display this page, click Switching > Dynamic ARP Inspection > Global in the navigation menu.

Click to expand in new window

Dynamic ARP Inspection Global Configuration

Field Description
Validate Source MAC When this option is selected, DAI verifies that the sender hardware address in the ARP packet equals the source MAC address in the Ethernet header. If the addresses do not match, the ARP packet is dropped.
Validate Destination MAC When this option is selected, DAI verifies that the target hardware address in the ARP packet equals the destination MAC address in the Ethernet header. If the addresses do not match, the ARP packet is dropped. This check applies only to ARP responses because the target MAC address is unspecified in ARP requests.
Validate IP When this option is selected, DAI drops ARP packets with an invalid IP address. The following IP addresses are considered invalid:
  • 0.0.0.0
  • 255.255.255.255
  • All IP multicast addresses
  • All class E addresses (240.0.0.0/4)
  • Loopback addresses (in the range 127.0.0.0/8)

If you change any of the parameters, click Submit to apply the changes to the system. If you want the switch to retain the new values across a power cycle, you must save the configuration.