User Manual

8-Port or 16-Port Gigabit Smart Managed Pro Switch Model GS418TPP, GS510TLP, and GS510TPP
Configure System Information User Manual120
Configure a dynamic ARP inspection ACL
DAI relies on the information in the DHCP snooping bindings database to validate ARP
packets. For networks that use static IP addresses and do not use DHCP, DAI access control
lists (ACLs) can be used to statically map an IP address to a MAC address on a VLAN. When
hosts use static IP addresses, the DHCP snooping feature cannot build a bindings database.
DAI ACLs are also useful when other switches in the network do not run DAI.
DAI consults the static mappings configured in the DAI ACLs before it consults the DHCP
snooping bindings database; thus static mappings receive precedence over DHCP snooping
bindings. If the static flag is enabled on a VLAN, DAI consults the DAI
ACL only and does not
validate
ARP information against the DHCP snooping bindings database.
To configure a dynamic ARP inspection ACL with three rules and associate it with
VLAN 100:
1. Connect your computer to the same network as the switch.
You can use a WiFi or wired connection to connect your computer to the network, or
connect directly to a switch that is of
f-network using an Ethernet cable.
2. Launch a web browser.
3. In the address field of your web browser, enter the IP address of the switch.
If you do not know the IP address of the switch, see
Change the default IP address of the
switch on page 13.
The login window opens.
4. Enter the switch’s password in the Password
field.
The default password is password.
The System Information page displays.
5. Select System> Services > Dynamic
ARP Inspection > DAI
ACL Configuration.
The DAI ACL Configuration page displays.
6. In the Name field, specify a name for the ACL.
For example, enter
arpACL.
7. Click the Add button.
The page displays the new ACL.