Figure 4.182Switching > Dynamic Arp Inspection > Vlan - Advantech EKI-9516P-HV User Manual

Eki-9500 series
Table of Contents

Advertisement

To access this page, click Switching > Dynamic ARP Inspection > VLAN.
Figure 4.182 Switching > Dynamic ARP Inspection > VLAN
The following table describes the items in the previous figure.
Item
Description
VLAN ID
Lists each VLAN that has been enabled for DAI. After you click Add,
use the VLAN ID menu to select the VLAN on which to enable DAI. A
VLAN does not need to exist on the system to be enabled for DAI.
Log Invalid Packets Indicates whether DAI logging is enabled on this VLAN. When logging
is enabled, DAI generates a log message whenever an invalid ARP
packet is discovered and dropped.
ARP ACL Name
The name of the of ARP access control list (ACL) that the VLAN uses
as the filter for ARP packet validation. The ARP ACL must already
exist on the system to associate it with a DAI-enabled VLAN. ARP
ACLs include permit rules only.
Static
Determines whether to use the DHCP snooping database for ARP
packet validation if the packet does not match any ARP ACL rules. The
options are as follows:
Refresh
Click Refresh to update the screen.
Add
Click Add to enable DAI on a VLAN and configure the optional DAI
settings.
Edit
Click Edit to edit the selected entries.
Remove
Click Remove to disable DAI for the selected entries.
To DAI on a VLAN and configure the optional DAI settings:
Click Switching > Dynamic ARP Inspection > VLAN > Add.
Figure 4.183 Switching > Dynamic ARP Inspection > VLAN > Add
The following table describes the items in the previous figure.
Item
Description
VLAN ID
Lists each VLAN that has been enabled for DAI. After you click Add,
use the VLAN ID menu to select the VLAN on which to enable DAI. A
VLAN does not need to exist on the system to be enabled for DAI.
Enable: The ARP packet will be validated by the ARP ACL rules
only. Packets that do not match any ARP ACL rules are dropped
without consulting the DHCP snooping database.
Disable: The ARP packet needs further validation by using the
entries in the DHCP Snooping database.
171
EKI-9500 Series User Manual

Advertisement

Table of Contents
loading

Table of Contents