Enterprise Network Port Security & Dynamic ARP Inspection (DAI)

Enterprise Network Port Security & Dynamic ARP Inspection (DAI)

Hardened Layer-2 network switch infrastructure against man-in-the-middle attacks and rogue network address spoofing.

Key Features & Implementation

• DHCP Snooping Binding Database: Enabled DHCP Snooping to build a trusted IP-to-MAC address binding database across switch ports.
• Dynamic ARP Inspection (DAI): Configured DAI to validate ARP packets against the DHCP snooping table, dropping malicious spoofed ARP responses.
• Sticky MAC Port Security: Restricted access switch ports to maximum 2 learned MAC addresses to prevent rogue switch additions.