258 Network Administration: SecurityFILE LOCATION: C:\Users\gina\Desktop\Checkout_new\Dell Astute\UserGuide\Dell_Astute_Network_Admin_Security.fmD E L L C O N F I D E N T I A L – P R E L I M I N A R Y 8 / 9 / 1 6 - F O R P R O O F O N L Y8 Set Set Port to Locked.9 Enter the following fields:– Action on Violation — Select the action to be applied to packetsarriving on a locked port. The possible options are:• Discard — Discard the packets from any unlearned source.• Forward — Forward the packets from an unknown source,without learning the MAC address.• Shutdown — Discard the packet from any unlearned source, andshut down the port. Ports remain shut down until they arereactivated, or the device is reset.– Trap — Enable/disable traps being sent when a packet is received on alocked port.– Trap Frequency (1-1000000) — Enter the amount of time (inseconds) between traps.10 Click OK. The feature is operational on the interface.Dynamic ARP Inspection (DAI)This section describes dynamic ARP inspection.It contains the following topics:• Overview• Global Settings• DAI List• DAI Entries• DAI VLAN Settings• Trusted InterfacesOverviewARP Inspection eliminates man-in-the-middle attacks, where false ARPpackets are inserted into the subnet. ARP requests and responses areinspected, and their MAC-address-to-IP-address binding is checked accordingto the ARP Inspection List defined by the user (in the DAI List and DAI
