• Download PDFs
• Verifying That DAI Is Working Correctly  

• Related Topics
• Enabling Dynamic ARP Inspection (CLI Procedure)
• Enabling Dynamic ARP Inspection (J-Web Procedure)
• Example: Configuring Port Security, with DHCP Snooping, DAI, MAC Limiting, and MAC Move Limiting, on an EX-series Switch
• Example: Configuring DHCP Snooping, DAI , and MAC Limiting on an EX-series Switch with Access to a DHCP Server Through a Second Switch
• Example: Configuring DHCP Snooping and DAI to Protect the Switch from ARP Spoofing Attacks
• Monitoring Port Security

Verifying That DAI Is Working Correctly

Purpose

Verify that dynamic ARP inspection (DAI) is working on the switch.

Action

Send some ARP requests from network devices connected to the switch.

Display the DAI information:

ARP inspection statistics:
Interface        Packets received  ARP inspection pass   ARP inspection failed
---------------  ---------------   -------------------- ---------------------
ge-0/0/1.0                      7                    5                     2
ge-0/0/2.0                     10                   10                     0
ge-0/0/3.0                     12                   12                     0

Meaning

The sample output shows the number of ARP packets received and inspected per interface, with a listing of how many packets passed and how many failed the inspection on each interface. The switch compares the ARP requests and replies against the entries in the DHCP snooping database. If a MAC address or IP address in the ARP packet does not match a valid entry in the database, the packet is dropped.