Protocols DAI

The protocols DAI member has the following attributes:

DAI Profile Attributes 

• Command Path – tolt>protocols >dai>config>
• Module – tolt
• Container – protocols
• Container – dai
• Container – config
• Types – 
  • *Admin-state – Whether to perform DAI checks on all vlans configured with dai enabled.  Both the global admin state must be enabled and dai set to true on the vlan. 
    • enabled | disabled (default)
  • Logging-admin-state – Whether to log DAI events to syslog.
    • enabled (default) | disabled 
  • Logging-type – Dai-log-deny is the default and will only log ARPs that are denied due to violating one of the ARP checks. 
    dai-log-all will log ALL arps both permitted and denied.  This should only be used in very specific debug cases.  Logging permits would often log hundreds of arps per second into the logs.
    dai-log-permit – Log all permitted arps but not denied arps.  Useful only for debugging. 
    • dai-log-all | dai-log-deny (default) | dai-log-permit
  • Destination-mac-check – Ensures that the destination MAC of the Ethernet Header agrees with the target MAC in the ARP body of ARP responses.  Should typically be enabled.
    • true (default) | false
  • Source-mac-check – Verifies that ARP header and body have the same source MAC address in both ARP requests and ARP responses.  Should typically be enabled..
    • true (default) | false
  • Arp-ip-check – Ensures that the IP address is a valid IP address will exclude all Multicast Address, all FFs or all zeroes.   IP is checked in all ARP requests and responses.  Should typically be enabled.
    • true (default) | false
  • Ip-source-protect – If desired, you can add source IP protection.  If this feature is enabled, once the Source IP is bound, it will drop all packets that do not match the source IP to MAC binding learned from DHCP. 
    • true (default) | false

Enable DAI Example

• Module – tolt
• Container – protocols
• Container – dai
• Container – config
• Type – Example Parameter
  • admin-state enabled 

1. From the MDS1-ESUA<Config># command line, input tolt protocols dai config admin-state enabled and press Enter. 
2. Input commit and press Enter. Outputs similar to the following are displayed:
    

   MDS1-ESUA<Config># tolt protocols dai config admin-state enabled <enter> MDS1-ESUA<Config># commit <enter> commit complete MDS1-ESUA<Config># _

Disable DAI Example

• Command Path – tolt>protocols >dai>config>
• Module – tolt
• Container – protocols
• Container – dai
• Container – config
• Type – Example Parameter
  • admin-state disabled 

1. From the MDS1-ESUA<Config># command line, input tolt protocols dai config admin-state disabled and press Enter. 
2. Input commit and press Enter. Outputs similar to the following are displayed:
    

   MDS1-ESUA<Config># tolt protocols dai config admin-state disabled <enter> MDS1-ESUA<Config># commit <enter> commit complete MDS1-ESUA<Config># _

Enable DAI Logging

• Command Path – tolt>protocols >dai>config>
• Module – tolt
• Container – protocols
• Container – dai
• Container – config
• Type – Example Parameter
  • logging-admin-state enabled

1. From the MDS1-ESUA<Config># command line, input tolt protocols dai config logging-admin-state enabled and press Enter. 
2. Input commit and press Enter. Outputs similar to the following are displayed:
    

   MDS1-ESUA<Config># tolt protocols dai config logging-admin-state enabled <enter> MDS1-ESUA<Config># commit <enter> commit complete MDS1-ESUA<Config># _