User Manual

Managing Device Security
458
M6100 Web Management User Guide
1. VLAN ID - Select the DAI Capable VLANs for which information has to be displayed or
configured.
2. Select from the Admin Mode menu to indicate whether the Dynamic
ARP Inspection is
enabled on this VLAN. If this object is set to Enable, then Dynamic ARP Inspection is
enabled. If this object is set to Disable, then Dynamic ARP Inspection is disabled. The
default is Disable.
3. Use Invalid Packets to indicate whether the Dynamic
ARP Inspection logging is enabled on
this VLAN. If this object is set to Enable, it will log the Invalid ARP Packets information. If
this object is set to Disable, Dynamic ARP Inspection logging is disabled. The default is
Enable.
4. Use ARP ACL
Name to specify a name for the ARP Access list. A VLAN can be configured
to use this ARP ACL containing rules as the filter for ARP packet validation. The name can
contain up to <1-31> alphanumeric characters. The ARP ACL Name is deleted if you specify
N/A.
5. Use Static Flag to determine whether the
ARP packet needs validation using the DHCP
Snooping database in case ARP ACL rules do not match. If the flag is enabled then the ARP
Packet will be validated by the ARP ACL Rules only. If the flag is disabled then the ARP
Packet needs further validation by using the DHCP Snooping entries. The factory default is
Disable.
6. Click Cancel to cancel the configuration on the screen and reset the data on the screen to
the latest value of the switch.
7. Click Apply to send the updated configuration to the switch. Configuration changes take
ef
fect immediately.
DAI Interface Configuration
To display the DAI Interface Configuration page, click Security  Control> Dynamic ARP
Inspection
 DAI Interface Configuration.