This article describes the case in which you need to configure ARP spoofing protection and clients are configured with static IP addresses.
On Extreme Summit we can use ACL instead of DAI: <\/p>\n\n\n\n
Im using XOS embedded edititor for ACL creation and modification. Very similar to Linux VI: <\/p>\n\n\n
\nexos# edit policy acl-in-port-1\n<\/pre><\/div>\n\n\n Here we are allowing all ARPs from host 10.10.10.2\/32. All other ARPs will be dropped. Also, im using counter of dropped packets. <\/p>\n\n\n
\nentry allow-arps { \n if match all { \n ethernet-type 0x0806;\n arp-sender-address 10.10.10.2 mask 255.255.255.255;\n }\n then {\n permit;\n }\n }\n entry deny-any-other-arp { \n if match all { \n ethernet-type 0x0806;\n }\n then {\n deny;\n count dropped-invalid-arp;\n }\n }\n<\/pre><\/div>\n\n\n In next step we need to attach ACL to users port: <\/p>\n\n\n
\nconfigure access-list acl-in-port-1 ports 1 ingress\n<\/pre><\/div>\n\n\n After all configuration is done, we can check counters on port: <\/p>\n\n\n
\n# sh access-list counter ports 1\nPolicy Name Vlan Name Port Direction \n Counter Name Packet Count Byte Count \n==================================================================\nacl-in-port-1 * 1 ingress \n dropped-invalid-arp 0 \n<\/pre><\/div>","protected":false},"excerpt":{"rendered":"This article describes the case in which you need to configure ARP spoofing protection and clients are configured with static IP addresses. On Extreme Summit we can use ACL instead of DAI: Im using XOS embedded edititor for ACL creation and modification. Very similar to Linux VI: Here we are allowing all ARPs from host\u2026 Read More »<\/a><\/span><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"ngg_post_thumbnail":0,"footnotes":""},"categories":[9],"tags":[19,18],"class_list":["post-253","post","type-post","status-publish","format-standard","hentry","category-security-extreme-summit","tag-dai","tag-extreme-summit"],"yoast_head":"\nConfigure DAI on Extreme Summit for static ip - isp-tech.ru<\/title>\n<meta name=\"description\" content=\"How to configure DAI on Extreme Summit for static IP. Extreme XOS ACL used. ARP Spoofing protection when static IP address used by client.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/isp-tech.ru\/en\/extreme-summit-dai-on-static\/\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"admin\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"1 minute\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/isp-tech.ru\/extreme-summit-dai-on-static\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/isp-tech.ru\/extreme-summit-dai-on-static\/\"},\"author\":{\"name\":\"admin\",\"@id\":\"https:\/\/isp-tech.ru\/#\/schema\/person\/bfc8f447cee1b54cc04a263ed0673363\"},\"headline\":\"How to configure DAI on Extreme Summit for static IP\",\"datePublished\":\"2019-05-27T13:58:01+00:00\",\"dateModified\":\"2021-04-19T20:46:07+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/isp-tech.ru\/extreme-summit-dai-on-static\/\"},\"wordCount\":184,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\/\/isp-tech.ru\/#\/schema\/person\/bfc8f447cee1b54cc04a263ed0673363\"},\"keywords\":[\"DAI\",\"Extreme Summit\"],\"articleSection\":[\"Security\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/isp-tech.ru\/extreme-summit-dai-on-static\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/isp-tech.ru\/extreme-summit-dai-on-static\/\",\"url\":\"https:\/\/isp-tech.ru\/extreme-summit-dai-on-static\/\",\"name\":\"Configure DAI on Extreme Summit for static ip - isp-tech.ru\",\"isPartOf\":{\"@id\":\"https:\/\/isp-tech.ru\/#website\"},\"datePublished\":\"2019-05-27T13:58:01+00:00\",\"dateModified\":\"2021-04-19T20:46:07+00:00\",\"description\":\"How to configure DAI on Extreme Summit for static IP. Extreme XOS ACL used. ARP Spoofing protection when static IP address used by client.\",\"breadcrumb\":{\"@id\":\"https:\/\/isp-tech.ru\/extreme-summit-dai-on-static\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/isp-tech.ru\/extreme-summit-dai-on-static\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/isp-tech.ru\/extreme-summit-dai-on-static\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"\u0413\u043b\u0430\u0432\u043d\u0430\u044f \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0430\",\"item\":\"https:\/\/isp-tech.ru\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"How to configure DAI on Extreme Summit for static IP\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/isp-tech.ru\/#website\",\"url\":\"https:\/\/isp-tech.ru\/\",\"name\":\"isp-tech.ru\",\"description\":\"\",\"publisher\":{\"@id\":\"https:\/\/isp-tech.ru\/#\/schema\/person\/bfc8f447cee1b54cc04a263ed0673363\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/isp-tech.ru\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":[\"Person\",\"Organization\"],\"@id\":\"https:\/\/isp-tech.ru\/#\/schema\/person\/bfc8f447cee1b54cc04a263ed0673363\",\"name\":\"admin\",\"logo\":{\"@id\":\"https:\/\/isp-tech.ru\/#\/schema\/person\/image\/\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Configure DAI on Extreme Summit for static ip - isp-tech.ru","description":"How to configure DAI on Extreme Summit for static IP. Extreme XOS ACL used. ARP Spoofing protection when static IP address used by client.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/isp-tech.ru\/en\/extreme-summit-dai-on-static\/","twitter_misc":{"Written by":"admin","Est. reading time":"1 minute"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/isp-tech.ru\/extreme-summit-dai-on-static\/#article","isPartOf":{"@id":"https:\/\/isp-tech.ru\/extreme-summit-dai-on-static\/"},"author":{"name":"admin","@id":"https:\/\/isp-tech.ru\/#\/schema\/person\/bfc8f447cee1b54cc04a263ed0673363"},"headline":"How to configure DAI on Extreme Summit for static IP","datePublished":"2019-05-27T13:58:01+00:00","dateModified":"2021-04-19T20:46:07+00:00","mainEntityOfPage":{"@id":"https:\/\/isp-tech.ru\/extreme-summit-dai-on-static\/"},"wordCount":184,"commentCount":0,"publisher":{"@id":"https:\/\/isp-tech.ru\/#\/schema\/person\/bfc8f447cee1b54cc04a263ed0673363"},"keywords":["DAI","Extreme Summit"],"articleSection":["Security"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/isp-tech.ru\/extreme-summit-dai-on-static\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/isp-tech.ru\/extreme-summit-dai-on-static\/","url":"https:\/\/isp-tech.ru\/extreme-summit-dai-on-static\/","name":"Configure DAI on Extreme Summit for static ip - isp-tech.ru","isPartOf":{"@id":"https:\/\/isp-tech.ru\/#website"},"datePublished":"2019-05-27T13:58:01+00:00","dateModified":"2021-04-19T20:46:07+00:00","description":"How to configure DAI on Extreme Summit for static IP. Extreme XOS ACL used. ARP Spoofing protection when static IP address used by client.","breadcrumb":{"@id":"https:\/\/isp-tech.ru\/extreme-summit-dai-on-static\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/isp-tech.ru\/extreme-summit-dai-on-static\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/isp-tech.ru\/extreme-summit-dai-on-static\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"\u0413\u043b\u0430\u0432\u043d\u0430\u044f \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0430","item":"https:\/\/isp-tech.ru\/"},{"@type":"ListItem","position":2,"name":"How to configure DAI on Extreme Summit for static IP"}]},{"@type":"WebSite","@id":"https:\/\/isp-tech.ru\/#website","url":"https:\/\/isp-tech.ru\/","name":"isp-tech.ru","description":"","publisher":{"@id":"https:\/\/isp-tech.ru\/#\/schema\/person\/bfc8f447cee1b54cc04a263ed0673363"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/isp-tech.ru\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":["Person","Organization"],"@id":"https:\/\/isp-tech.ru\/#\/schema\/person\/bfc8f447cee1b54cc04a263ed0673363","name":"admin","logo":{"@id":"https:\/\/isp-tech.ru\/#\/schema\/person\/image\/"}}]}},"_links":{"self":[{"href":"https:\/\/isp-tech.ru\/en\/wp-json\/wp\/v2\/posts\/253","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/isp-tech.ru\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/isp-tech.ru\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/isp-tech.ru\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/isp-tech.ru\/en\/wp-json\/wp\/v2\/comments?post=253"}],"version-history":[{"count":14,"href":"https:\/\/isp-tech.ru\/en\/wp-json\/wp\/v2\/posts\/253\/revisions"}],"predecessor-version":[{"id":1091,"href":"https:\/\/isp-tech.ru\/en\/wp-json\/wp\/v2\/posts\/253\/revisions\/1091"}],"wp:attachment":[{"href":"https:\/\/isp-tech.ru\/en\/wp-json\/wp\/v2\/media?parent=253"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/isp-tech.ru\/en\/wp-json\/wp\/v2\/categories?post=253"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/isp-tech.ru\/en\/wp-json\/wp\/v2\/tags?post=253"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}