User Manual

Manage Device Security
627
M6100, M5300, and M7100 Series Managed Switches
The default IP address of the switch is 169.254.100.100.
The Login screen displays.
5. Enter the user name and password.
The default admin user name is admin and the default admin password is blank, that is,
do not enter a password.
6. Click the Login button.
The web management interface menu displays.
7. Select Security > Control > Dynamic ARP Inspection > DAI VLAN Configuration.
8. Use the VLAN ID check boxes to select the DAI capable VLANs.
9. In the Admin Mode list, select Enable or Disable.
This indicates whether the dynamic ARP inspection is enabled on this VLAN. If this is set
to Enable, then dynamic ARP inspection is enabled. If this is set to Disable, then
dynamic ARP inspection is disabled. The default is Disable.
10. Use Invalid Packets to indicate whether the dynamic ARP inspection logging is enabled on
this VLAN.
If this is set to Enable, invalid ARP packets information is logged. If it is set to Disable,
dynamic ARP inspection logging is disabled. The default is Enable.
11. Use ARP ACL Name to specify a name for the ARP access list.
A VLAN can be configured to use this ARP ACL containing rules as the filter for ARP
packet validation. The name can contain up to 31 alphanumeric characters. The ARP
ACL name is deleted if you specify N/A.
12. Use Static Flag to determine whether the ARP packet needs validation using the DHCP
snooping database in case ARP ACL rules do not match.
If the flag is enabled then the ARP packet is validated by the ARP ACL rules only. If the
flag is disabled then the ARP packet needs further validation by using the DHCP
snooping entries. The factory default is Disable.
13. Click the Apply button.
The updated configuration is sent to the switch. Configuration changes take effect
immediately.