Protecting against ARP attacks using a Cisco switch

This video demonstrates how to configure DAI (dynamic ARP Inspection) on a Cisco switch to protect against ARP poising and ARP spoofing attacks. DAI requires DHCP snooping in order to work so make sure that you check out that video as well.

[@tahersadeghi6773]

David. Your videos are scientific. The best and most enjoyable. Thank you.

[@a28bre55]

Why do we need a DCHP SNOOPING?

[@ddaltonyvcc]

DHCP snooping is designed to prevent rogue DHCP servers on your network. Rogue DHCP servers can be used to create some very serious network attacks so we enable DHCP snooping to try to prevent them.

[@truegospel4065]

@@ddaltonyvcc I think the question is if DHCP snooping is requirement for arp inspection to work.?

[@ahnicc]

Yes you need dhcp snooping for DAI to work. As it uses dhcp snooping binding table.