Configure egress ARP inspection (EAI) on S series switches

After EAI is enabled on an S series switch (except the S1700 switch�?, the switch restricts the scope of ARP packet forwarding. This function prevents broadcast of ARP packets in a VLAN and reduces the traffic volume in the VLAN.
1. In the VLAN view, run the dhcp snooping arp security enable command to enable EAI.
By default, EAI is disabled.
2. (Optional) Run the dhcp snooping arp security isolate-forwarding-trust command to forward ARP packets to trusted interfaces when port isolation is enabled on both inbound and outbound interfaces. If port isolation is enabled on the interface connected to the user side, perform this configuration on the switch enabled with EAI and configure intra-VLAN proxy ARP on the uplink devices.
By default, the function of forwarding ARP packets to trusted interfaces when port isolation is enabled on both inbound and outbound interfaces is disabled.

Scroll to top