User Guide

Configure System Information

GS716Tv3, GS724Tv4, and GS748Tv5 Smart Switches

10. Select System > Services > Dynamic ARP Inspection > DAI VLAN Configuration.

11. Next to VLAN 100, select the check box.

12. In the ARP ACL Name field, specify the name of the DAI ACL to associate with the VLAN.

13. Click the Apply button.

Configure Optional DAI Features

If you configure the source MAC address validation option, DAI verifies that the sender MAC

address in an ARP packet equals the source MAC address in the Ethernet header. There is a

configurable option to verify that the target MAC address in the ARP packet equals the

destination MAC address in the Ethernet header. This check applies only to ARP responses,

since the target MAC address is unspecified in ARP requests. You can also enable IP

address checking. When this option is enabled, DAI drops ARP packets with an invalid IP

address. The following IP addresses are considered invalid:

• 0.0.0.0

• 255.255.255.255

• All IP multicast addresses

• All class E addresses (240.0.0.0/4)

• Loopback addresses (in the range 127.0.0.0/8)

The valid IP check is applied only on the sender IP address in ARP packets. In ARP

response packets, the check is applied only on the target IP address.