User Manual

24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports
Configure System Information User Manual138
When DAI is enabled on a VLAN, DAI is enabled on the interfaces (physical ports or LAGs)
that are members of that VLAN. Individual interfaces are configured as trusted or untrusted.
The trust configuration for DAI is independent of the trust configuration for DHCP snooping.
Configure the global DAI settings
If you configure the source MAC address validation option, DAI verifies that the sender MAC
address in an ARP packet equals the source MAC address in the Ethernet header.
The Ethernet header includes a configurable option to verify that the target MAC address in
the
ARP packet equals the destination MAC address. This check applies only to ARP
responses, since the target MAC address is unspecified in ARP requests. You can also
enable IP address checking. When this option is enabled, DAI drops ARP packets with an
invalid IP address. The following IP addresses are considered invalid:
• 0.0.0.0
• 255.255.255.255
• All IP multicast addresses
• All class E addresses (240.0.0.0/4)
• Loopback addresses (in the range 127.0.0.0/8)
The valid IP check is applied only on the sender IP address in ARP packets. In ARP
response packets, the check is applied only on the target IP address.
To configure the global DAI settings:
1. Connect your computer to the same network as the switch.
You can use a WiFi or wired connection to connect your computer to the network, or
connect directly to a switch that is of
f-network using an Ethernet cable.
2. Launch a web browser.
3. In the address field of your web browser
, enter the IP address of the switch.
If you do not know the IP address of the switch, see
Access the switch on-network and
connected to the Internet on page 21 or Access the switch off-network and not
connected to the Internet on page 29.
The Device UI login page displays.
If you did not yet activate your warranty, the Register to activate your warranty page
displays. For more information, see
Register the switch on page 32.
4. Enter one of the following passwords:
• Enter your device admin password.
• If you previously managed the switch through the Insight app or Cloud portal, enter
the Insight network password for the last Insight network location.
For information about the credentials, see
Credentials for the device UI on page 30.
5. Click the Go button.