- Download
Software
- Research a
Problem - Case Management
- Communities and Forums
- Contract & Product Management
- Technical Documentation Advanced Search
- Documentation Feedback Form
- Documentation Symbols Key
- End-of-Life Products
- Guidelines and Policies
- Security Resources
Juniper was the first North American IP routing vendor to achieve the prestigious TL 9000 certification by the Quality of Excellence for Suppliers of Telecommunications (QuEST) Forum in the router category, for design, development, provision and service and support.
What is J-Care?
It's the world-class service and support that you expect from a company that delivers the industry's best infrastructure and security products. With J-Care, you now have the confidence knowing that Juniper will do our part to keep you on top of the world!
- Download PDFs
-
Enabling DAI on a VLAN (J-Web Procedure)
- Related Topics
- Enabling DAI on a VLAN (CLI Procedure)
- Example: Configuring Port Security, with DHCP Snooping, DAI, MAC Limiting, and MAC Move Limiting, on an EX-series Switch
- Example: Configuring DHCP Snooping, DAI , and MAC Limiting on an EX-series Switch with Access to a DHCP Server Through a Second Switch
- Example: Configuring DHCP Snooping and DAI to Protect the Switch from ARP Spoofing Attacks
- Verifying That DAI Is Working Correctly
- Monitoring Port Security
- Understanding DAI for Port Security on EX-series Switches
Enabling DAI on a VLAN (J-Web Procedure)
Dynamic ARP inspection (DAI) protects EX-series switches against ARP spoofing. DAI inspects ARP packets on the LAN and uses the information in the DHCP snooping database on the switch to validate ARP packets and to protect against ARP cache poisoning.
You configure DAI for each VLAN, not for each interface (port). By default, DAI is disabled for all VLANs.
To enable DAI on one or more VLANs by using the J-Web interface:
- Select Configure>Security>Port Security.
- Select one or more VLANs from the VLAN list.
- Click the Edit button. If a message appears asking if you want to enable port security, click Yes.
- Select the Enable ARP Inspection on VLAN check box and then click OK.
- Click OK after the command has been successfully delivered.
 |
Note: You can enable or disable port security on the switch at any time by clicking the Activate or Deactivate button on the Port Security Configuration page. If security status is shown as Disabled when you try to edit settings for any VLANs or interfaces (ports), the message asking if you want to enable port security appears. |