- Downloads
- arp-inspection
- Related Topics
- Example: Configuring Port Security, with DHCP Snooping, DAI, MAC Limiting, and MAC Move Limiting, on an EX Series Switch
- Example: Configuring DHCP Snooping, DAI , and MAC Limiting on an EX Series Switch with Access to a DHCP Server Through a Second Switch
- Example: Configuring DHCP Snooping and DAI to Protect the Switch from ARP Spoofing Attacks
- Enabling Dynamic ARP Inspection (CLI Procedure)
- Enabling Dynamic ARP Inspection (J-Web Procedure)
arp-inspection
Syntax
Hierarchy Level
- [edit ethernet-switching-options secure-access-port vlan (all
| vlan-name)]
Release Information
Statement introduced in JUNOS Release 9.0 for EX Series switches.
Description
Perform dynamic ARP inspection (DAI) on all VLANs or on the specified VLAN.
- arp-inspection—Enable DAI.
When ARP inspection is enabled, the switch logs invalid ARP packets that it receives on each interface, along with the sender’s IP and MAC addresses.
- no-arp-inspection—Disable DAI.
Default
Disabled.
Required Privilege Level
routing—To view this statement in the configuration.
routing-control—To add this statement to the configuration.
