M4300 Series and M4300-96X Fully Managed Switches User Manual
Table 208. DAI Statistics (continued)
Field
DHCP Permits
ACL Drops
ACL Permits
Bad Source MAC
Bad Dest MAC
Invalid IP
Forwarded
Dropped
Set Up Captive Portals
The captive portal feature allows you to prevent clients from accessing the network until user
verification is established. You can configure captive portal verification to allow access for
both guest and authenticated users. Authenticated users must be validated against a
database of authorized captive portal users before access is granted. The database can be
stored locally on the device or on a RADIUS server.
Configure Captive Portal Global Settings
You can control the administrative state of the captive portal feature, and configure global
settings that affect all captive portals configured on the switch.
To configure captive portal global settings:
Launch a web browser.
1.
In the address field of your web browser, enter the IP address of the switch.
2.
The login window opens.
Enter the user name and password.
3.
Description
Number of ARP packets that were forwarded by DAI because there is a
matching DHCP snooping binding entry found.
Number of ARP packets that were dropped by DAI because there is no
matching ARP ACL rule found for this VLAN and the static flag is set on
this VLAN.
Number of ARP packets that were permitted by DAI because there is a
matching ARP ACL rule found for this VLAN.
Number of ARP packets that were dropped by DAI because the sender
MAC address in ARP packets didn't match the source MAC in Ethernet
header.
Number of ARP packets that were dropped by DAI because the target
MAC address in ARP reply packets didn't match the destination MAC in
Ethernet header.
Number of ARP packets that were dropped by DAI because the sender
IP address in ARP packets or the target IP address in ARP reply
packets is invalid. Invalid addresses include 0.0.0.0, 255.255.255.255,
IP multicast addresses, class E addresses (240.0.0.0/4), loopback
addresses (127.0.0.0/8).
Number of valid ARP packets forwarded by DAI.
Number of invalid ARP packets dropped by DAI.
Manage Device Security
575