Configure Dynamic ARP Inspection on VLANs

Use the following procedure to enable or disable DAI on one or more VLANs.

Note

Note

DAI cannot be enabled on Private VLANs (E-Tree) and SPBM B-VLANs.

Before you begin

You must enable DHCP Snooping globally.

Procedure

  1. In the navigation pane, expand Configuration > IP.
  2. Select ARP Inspection.
  3. Select the ARP Inspection-VLAN tab.
  4. In the row for the VLAN, double-click Enabled, and select true.
  5. Select Apply.

ARP Inspection-VLAN Field Descriptions

Use the data in the following table to use the ARP Inspection-VLAN tab.

Name

Description

VlanId

Specifies the VLAN ID.

Enabled

Specifies if DAI is enabled or disabled for the particular VLAN. By default, DAI is disabled.

Origin

Specifies the origin of Address Resolution Protocol (ARP) Inspection configuration on the VLAN. The supported values are:

  • config - Set by the user.

  • radius - Set by the Remote Authentication Dail-In User Service (RADIUS) attribute.