Advantech EKI-9228G-8CMI, User Manual

Page: 187 / 324

169 EKI-9228G Series User Manual
4.4.5.3 Interface
Use the Interface Configuration page to configure the per-interface Dynamic ARP
Inspection (DAI) settings.
To access this page, click Switching > Dynamic ARP Inspection > Interface.
Figure 4.181 Switching > Dynamic ARP Inspection > Interface
The following table describes the items in the previous figure.
4.4.5.4 ACL
Use the Dynamic ARP Inspection ACL Configuration page to configure ARP Access
Control Lists (ACLs). An ARP ACL can contain one or more permit rules. Each rule
contains the IP address and MAC address of a system allowed to send ARP packets.
When an ARP ACL is associated with a DAI-enabled VLAN, and an ARP packet is
received on an interface that is a member of that VLAN, DAI validates the address
information in the ARP packet against the rules in the ACL. If the sender information
in the ARP packet matches a rule in the ARP ACL, DAI considers the packet to be
valid, and the packet is forwarded.
Submit Click Submit to save the values.
Cancel Click Cancel to close the window.
Item Description
Item Description
Interface The interface associated with the rest of the data in the row. In the Edit
Interface Configuration window, this field identifies the interface that is
being configured.
Trust State Indicates whether the DAI feature should check traffic on the interface
for possible ARP packet violations. Trust state can be enabled or dis-
abled after you select an interface and click Edit. This field has one of
the following values:

Enabled: The interface is trusted. ARP packets arriving on this
interface are forwarded without DAI validation.

Disabled: The interface is not trusted. ARP packets arriving on
this interface are subjected to ARP inspection.
Rate Limit The maximum rate for incoming ARP packets on the interface, in pack-
ets per second (pps). If the incoming rate exceeds the configured limit,
the ARP packets are dropped. Rate limiting can be enabled or disabled
after you select an interface and click Edit.
Burst Interval The number of consecutive seconds the interface is monitored for
incoming ARP packet rate limit violations.
Refresh Click Refresh to update the screen.
Edit Click Edit to edit the selected entries.