dynamic ARP inspection (DAI)

Dynamic ARP Inspection (DAI) is a security feature thatchecks the validity of Address Resolution Protocol (ARP) requests and responses on the network.

DAI inspection captures and logs ARP data packets and discards those with invalid IP addresses or MAC addresses. In this way, the DAI function protects the network from man-in-the-middle attacks.

Dynamic ARP Inspection ensures that only valid ARP requests and ARP responses are forwarded. Requests and responses to and from unreliable ports are intercepted and forwarded to the destination station only after IP and MAC address verification.