Verifying That Dai Is Working Correctly - Dell PowerConnect J-EX4200-24T Software Manual

Dell PowerConnect J-Series Ethernet Switch Complete Software Guide for Junos OS
Related
Documentation

Verifying That DAI Is Working Correctly

Purpose
Action
Meaning
Related
Documentation
2656
IP address and lease time—that is, the time, in seconds, remaining before the lease
expires.
If the DHCP server had been configured as untrusted, no entries would be added to the
DHCP snooping database and nothing would be shown in the output of the
command.
snooping binding
Enabling a Trusted DHCP Server (CLI Procedure) on page 2632
Enabling a Trusted DHCP Server (J-Web Procedure) on page 2632
Example: Configuring Port Security, with DHCP Snooping, DAI, MAC Limiting, and MAC
Move Limiting, on a J-EX Series Switch on page 2569
Example: Configuring a DHCP Server Interface as Untrusted to Protect the Switch from
Rogue DHCP Server Attacks on page 2579
Monitoring Port Security on page 2653
Troubleshooting Port Security on page 2665
Verify that dynamic ARP inspection (DAI) is working on the switch.
Send some ARP requests from network devices connected to the switch.
Display the DAI information:
user@switch> show arp inspection statistics
ARP inspection statistics:
Interface Packets received
--------------- ---------------
ge-0/0/1.0
ge-0/0/2.0
ge-0/0/3.0
The sample output shows the number of ARP packets received and inspected per
interface, with a listing of how many packets passed and how many failed the inspection
on each interface. The switch compares the ARP requests and replies against the entries
in the DHCP snooping database. If a MAC address or IP address in the ARP packet does
not match a valid entry in the database, the packet is dropped.
Enabling Dynamic ARP Inspection (CLI Procedure) on page 2633
Enabling Dynamic ARP Inspection (J-Web Procedure) on page 2634
Example: Configuring Port Security, with DHCP Snooping, DAI, MAC Limiting, and MAC
Move Limiting, on a J-EX Series Switch on page 2569
Example: Configuring DHCP Snooping, DAI , and MAC Limiting on a J-EX Series Switch
with Access to a DHCP Server Through a Second Switch on page 2593
Example: Configuring DHCP Snooping and DAI to Protect the Switch from ARP Spoofing
Attacks on page 2586
ARP inspection pass
-------------------- ---------------------
7 5
10 10
12 12
show dhcp
ARP inspection failed
2
0
0