Enabling Dynamic Arp Inspection (J-Web Procedure) - Dell PowerConnect J-EX4200-24T Software Manual

Dell PowerConnect J-Series Ethernet Switch Complete Software Guide for Junos OS

Enabling Dynamic ARP Inspection (J-Web Procedure)

Related
Documentation
2634
Example: Configuring DHCP Snooping and DAI to Protect the Switch from ARP Spoofing
Attacks on page 2586
Verifying That DAI Is Working Correctly on page 2656
Monitoring Port Security on page 2653
Understanding DAI for Port Security on J-EX Series Switches on page 2555
Dynamic ARP inspection (DAI) protects J-EX Series switches against ARP spoofing. DAI
inspects ARP packets on the LAN and uses the information in the DHCP snooping
database on the switch to validate ARP packets and to protect against ARP cache
poisoning.
You configure DAI for each VLAN, not for each interface (port). By default, DAI is disabled
for all VLANs.
To enable DAI on one or more VLANs by using the J-Web interface:
Select Configure>Security>Port Security
1.
Select one or more VLANs from the VLAN list.
2.
Click the Edit button. If a message appears asking if you want to enable port security,
3.
click Yes .
Select the Enable ARP Inspection on VLAN
4.
Click after the command has been successfully delivered.
5. OK
NOTE: You can enable or disable port security on the switch at any time by
clicking the Activate
page. If security status is shown as
any VLANs or interfaces (ports), the message asking if you want to enable
port security appears.
Enabling Dynamic ARP Inspection (CLI Procedure) on page 2633
Example: Configuring Port Security, with DHCP Snooping, DAI, MAC Limiting, and MAC
Move Limiting, on a J-EX Series Switch on page 2569
Example: Configuring DHCP Snooping, DAI , and MAC Limiting on a J-EX Series Switch
with Access to a DHCP Server Through a Second Switch on page 2593
Example: Configuring DHCP Snooping and DAI to Protect the Switch from ARP Spoofing
Attacks on page 2586
Verifying That DAI Is Working Correctly on page 2656
Monitoring Port Security on page 2653
.
check box and then click
or Deactivate button on the Port Security Configuration
Disabled when you try to edit settings for
OK .