NETGEAR XS708T User Manual page 112

XS708T, XS712Tv2, and XS716T Smart Managed Pro Switch User Manual
Configure a DAI ACL
DAI relies on the information in the DHCP snooping bindings database to validate ARP
packets. For networks that use static IP addresses and do not use DHCP, DAI access control
lists (ACLs) can be used to statically map an IP address to a MAC address on a VLAN. When
hosts use static IP addresses, the DHCP snooping feature cannot build a bindings database.
DAI ACLs are also useful when other switches in the network do not run DAI.
DAI consults the static mappings configured in the DAI ACLs before it consults the DHCP
snooping bindings database; thus static mappings receive precedence over DHCP snooping
bindings. If the static flag is enabled on a VLAN, DAI consults the DAI ACL only and does not
validate ARP information against the DHCP snooping bindings database.

To configure a DAI ACL with three rules and associate it with VLAN 100:
1. Connect your computer to the same network as the switch.
You can use a WiFi or wired connection to connect your computer to the network, or
connect directly to a switch that is off-network using an Ethernet cable.
2. Launch a web browser.
3. In the address field of your web browser, enter the IP address of the switch.
If you do not know the IP address of the switch, see
Switch on page 10.
The login window opens.
4. Enter the switch's password in the Password field.
The default password is password.
The System Information page displays.
5. Select System> Services > Dynamic ARP Inspection > DAI ACL Configuration.
The DAI ACL Configuration page displays.
6. In the Name field, specify a name for the ACL.
For example, enter arpACL.
7. Click the Add button.
The page displays the new ACL.
Configure System Information
112
Change the Default IP Address of the