User Manual

24-Port and 48-Port Gigabit Ethernet PoE+ Smart Switches with 4 SFP Ports
Configure System Information User Manual142
The Trust Mode field indicates whether the interface is trusted for dynamic ARP
inspection purposes. All interfaces are untrusted by default.
10. In the Rate Limit (pps) field, specify the rate limit value for dynamic ARP inspection
purposes.
If the incoming rate of ARP packets per second exceeds the configured burst interval per
second,
ARP packets are dropped. If this value is None (N/A), no limit exists. The value
can be set to –1, which means N/A. The rate limit range is 0–300. The default is 15
packets per second (pps).
11. In the Burst Interval(secs) field, specify the burst interval value for rate limiting purposes on
this interface.
If the rate limit is None, the burst interval is also nonapplicable and is displayed as N/A.
The burst interval range is 1–15 seconds.
The default is 1 second.
12. Click the Apply button.
Your settings are saved.
13. T
o configure rate limiting for ports 1–10, which are untrusted ports, do the following:
a. Click 1 in the interface-selection field to view all ports.
b. Select each check box associated with ports 1–10.
c. In the Rate Limit (pps) field, enter 10.
14. Click the Apply button.
Your settings are saved.
Configure a DAI ACL
DAI relies on the information in the DHCP snooping bindings database to validate ARP
packets. For networks that use static IP addresses and do not use DHCP, DAI access control
lists (ACLs) can be used to statically map an IP address to a MAC address on a VLAN. When
hosts use static IP addresses, the DHCP snooping feature cannot build a bindings database.
DAI ACLs are also useful when other switches in the network do not run DAI.
DAI consults the static mappings configured in the DAI ACLs before it consults the DHCP
snooping bindings database; thus static mappings receive precedence over DHCP snooping
bindings. If the static flag is enabled on a VLAN, DAI consults the DAI
ACL only and does not
validate ARP information against the DHCP snooping bindings database.
To configure a DAI ACL with three rules and associate it with VLAN 100:
1. Connect your computer to the same network as the switch.
You can use a WiFi or wired connection to connect your computer to the network, or
connect directly to a switch that is of
f-network using an Ethernet cable.
2. Launch a web browser.
3. In the address field of your web browser
, enter the IP address of the switch.