Interface Config

After DAI is enabled in the interface view, the switch checks the ARP packets received by this interface against the binding table.

Context

Configuring DAI on an access device can prevent MITM attacks and theft on authorized users' information. After DAI is configured, the device compares the source IP address, source MAC address, VLAN ID, and interface number in the received ARP packet with binding entries. If the ARP packet matches a binding entry, the device considers the ARP packet valid and allows the packet to pass through. If the ARP packet does not match a binding entry, the device considers the ARP packet invalid and discards the packet.

When DAI is enabled in an interface view, the device checks all ARP packets received on the interface against binding entries.

This function is available only for DHCP snooping scenarios.

Procedure

Configure interface-based DAI.

Choose Security > DAI > Interface Config in the navigation tree to open the Interface Config page

Select an interface and click Configure to open the Interface DAI Config page

Table 1 describes the parameters on the page.

**Table 1** Interface DAI Config
Parameter		Description
Interface name		Indicates the interface where the DAI function will be configured.
Trust status		Indicates the trust status on the interface. The interface directly or indirectly connected to the DHCP server trusted by the administrator is set as a trusted interface, and other interfaces are set as untrusted interfaces.
DAI status		Configures the DAI function.
Rate limiting		Enables ARP packet rate limiting.
Rate limit		Sets the upper rate limit of ARP packets, in pps. This parameter can be set only after the rate limiting function is enabled for ARP packets.

Set the required parameters.
Click OK to complete the configuration.

Query interface-based DAI.
1. Choose Security > DAI > Interface Config in the navigation tree to open the Interface Config page.
2. In the Query area, select an interface type and enter the interface number, and click Query.