Navigation
Supported Platforms
Related Documentation
- EX Series, QFX Series standalone switches
- Enabling Dynamic ARP Inspection (CLI Procedure)
- Example: Configuring DHCP Snooping, DAI , and MAC Limiting on a Switch with Access to a DHCP Server Through a Second Switch
- Example: Configuring DHCP Snooping and DAI to Protect the Switch from ARP Spoofing Attacks
- EX Series
- Enabling Dynamic ARP Inspection (J-Web Procedure)
- EX Series, QFabric System, QFX Series standalone switches
- Example: Configuring Basic Port Security Features
- Monitoring Port Security
Verifying That DAI Is Working Correctly
Purpose
Verify that dynamic ARP inspection (DAI) is working on the switch.
Action
Send some ARP requests from network devices connected to the switch.
Display the DAI information:
user@switch> show arp inspection statistics
ARP inspection statistics: Interface Packets received ARP inspection pass ARP inspection failed --------------- --------------- -------------------- --------------------- ge-0/0/1.0 7 5 2 ge-0/0/2.0 10 10 0 ge-0/0/3.0 12 12 0
Meaning
The sample output shows the number of ARP packets received and inspected per interface, with a listing of how many packets passed and how many failed the inspection on each interface. The switch compares the ARP requests and replies against the entries in the DHCP snooping database. If a MAC address or IP address in the ARP packet does not match a valid entry in the database, the packet is dropped.
Related Documentation
- EX Series, QFX Series standalone switches
- Enabling Dynamic ARP Inspection (CLI Procedure)
- Example: Configuring DHCP Snooping, DAI , and MAC Limiting on a Switch with Access to a DHCP Server Through a Second Switch
- Example: Configuring DHCP Snooping and DAI to Protect the Switch from ARP Spoofing Attacks
- EX Series
- Enabling Dynamic ARP Inspection (J-Web Procedure)
- EX Series, QFabric System, QFX Series standalone switches
- Example: Configuring Basic Port Security Features
- Monitoring Port Security
Published: 2014-07-23
Supported Platforms
Related Documentation
- EX Series, QFX Series standalone switches
- Enabling Dynamic ARP Inspection (CLI Procedure)
- Example: Configuring DHCP Snooping, DAI , and MAC Limiting on a Switch with Access to a DHCP Server Through a Second Switch
- Example: Configuring DHCP Snooping and DAI to Protect the Switch from ARP Spoofing Attacks
- EX Series
- Enabling Dynamic ARP Inspection (J-Web Procedure)
- EX Series, QFabric System, QFX Series standalone switches
- Example: Configuring Basic Port Security Features
- Monitoring Port Security
