DAI

• Dynamic ARP Inspection is a security tool that inspects ARP packets in the network.
• Compares ARP messages against the DHCP Snooping binding table to prevent MITM/On-Path attacks
  • It is used to prevent ARP Poisoning
• DHCP Snooping is required for DAI to function

Metadata

OSI or TCP/IP Layer

CCNA Exam Topic

Contributors

Sources

Understanding and Configuring Dynamic ARP Inspection - Cisco