Configure Dynamic ARP Inspection on VLANs

Use the following procedure to enable or disable DAI on one or more VLANs.

Note

DAI cannot be enabled on Private VLANs (E-Tree) and SPBM B-VLANs.

Before you begin

You must enable DHCP Snooping globally.

In the navigation pane, expand Configuration > IP.
Click ARP Inspection.
Click the ARP Inspection-VLAN tab.
In the row for the VLAN, double-click the Enabled field, and select true to enable DAI.
Click Apply.

Use the data in the following table to use the ARP Inspection-VLAN tab.


Name	Description
VlanId	Specifies the VLAN ID.
Enabled	Specifies if DAI is enabled or disabled for the particular VLAN. By default, DAI is disabled.
Origin	Specifies the origin of Address Resolution Protocol (ARP) Inspection configuration on the VLAN. The supported values are: config - Set by the user. radius - Set by the Remote Authentication Dail-In User Service (RADIUS) attribute.