Was this article helpful? Yes No
- Enable DHCP snooping globally.
(Netgear Switch) (Config)# ip dhcp snooping
- Enable DHCP snooping in a VLAN.
(Netgear Switch) (Config)# ip dhcp snooping vlan 1
- Configure the port through which the DHCP server is reached as trusted.
(Netgear Switch) (Config)# interface 1/0/1
(Netgear Switch) (Interface 1/0/1)# ip dhcp snooping trust - View the DHCP Snooping Binding table.
- Enable ARP inspection in VLAN 1.
(Netgear Switch) (Config)# ip arp inspection vlan 1
See AlsoWhat Is MakerDAO and Dai? How Does DAI Work?Defense Agencies InitiativeImagine Communications · Broadcasting & Media Production CompanyDAI Use Case | CryptoWallet.comNow all ARP packets received on ports that are members of the VLAN are copied to the CPU for ARP inspection. If there are trusted ports, you can configure them as trusted in the next step. ARP packets received on trusted ports are not copied to the CPU.
- Configure port 1/0/1 as trusted.
(Netgear Switch) (Config)# interface 1/0/1
(Netgear Switch) (Interface 1/0/1)# ip arp inspection trustNow ARP packets from the DHCP client go through because there is a DHCP snooping entry; however ARP packets from the static client are dropped. It can be overcome by static configuration.
For more information, see the following support articles:
- How do I configure static mapping using CLI commands on my managed switch?
- What is Dynamic ARP inspection (DAI) and how does it work with my managed switch?
- How do I configure Dynamic ARP inspection (DAI) using the web interface on my managed switch?
This article applies to the following managed switches and their respective firmware:
- M5300 - firmware version 10.0.0.x
- M5300-28G (GSM7228S)
- M5300-5G (GSM7252S)
- M5300-28G3 (GSM7328Sv2h2)
- M5300-52G3 (GSM7352Sv2h2)
- M5300-28G_POE+ (GSM7228PSv1h2)
- M5300-52G-POE+ (GSM7252PSv1h2)
- M5300-28GF3 (GSM7328FSv2)
- M4100 - firmware version 10.0.1.x
- M4100-26G (GSM7224v2h2)
- M4100-50G (GSM7248v2h2)
- M4100-26G-POE (GSM7226Pv1h1)
- M4100-50G-POE+ (GSM7248Pv1h1)
- M4100-26G-POE (FSM7226Pv1h1)
- M4100-50-POE (FSM7250Pv1h1)
- M4100-D12G (GSM5212v1h1)
- M4100-D10-POE (FSM5210Pv1h1)
- M7100 - firmware version 10.0.1.x
- M7100-24X (XSM7224)
- XSM7224S - firmware version 9.0.1.x
Last Updated:03/29/2023 | Article ID: 21809
Was this article helpful?
Yes NoThis article applies to:
- Fully Managed Switch (51)
- GSM4230PX (TAA)
- GSM4248PX (TAA)
- GSM7228PS
- GSM7252PS
- GSM7328FS
- GSM7328SO
- GSM7328Sv1
- GSM7328Sv2
- GSM7352SO
- GSM7352Sv1
- GSM7352Sv2
- M4200-10MG-PoE+ (GSM4210P)
- M4250-10G2F-PoE+ (GSM4212P)
- M4250-10G2XF-PoE+ (GSM4212PX)
- M4250-10G2XF-PoE++ (GSM4212UX)
- M4250-12M2XF (MSM4214X)
- M4250-16XF (XSM4216F)
- M4250-26G4F-PoE+ (GSM4230P)
- M4250-26G4F-PoE++ (GSM4230UP)
- M4250-26G4XF-PoE+ (GSM4230PX)
- M4250-40G8F-PoE+ (GSM4248P)
- M4250-40G8XF-PoE+ (GSM4248PX)
- M4250-40G8XF-PoE++ (GSM4248UX)
- M4250-8G2XF-PoE+ (GSM4210PX)
- M4250-9G1F-PoE+ (GSM4210PD)
- M4300-12X12F (XSM4324S)
- M4300-16X (XSM4316PA)
- M4300-16X (XSM4316PB)
- M4300-24X (XSM4324CS)
- M4300-24X24F (XSM4348S)
- M4300-24XF (XSM4324FS)
- M4300-28G (GSM4328S)
- M4300-28G-PoE+ (GSM4328PA)
- M4300-28G-PoE+ (GSM4328PB)
- M4300-48X (XSM4348CS)
- M4300-48XF (XSM4348FS)
- M4300-52G (GSM4352S)
- M4300-52G-PoE+ (GSM4352PA)
- M4300-52G-PoE+ (GSM4352PB)
- M4300-8X8F (XSM4316S)
- M4500-32C (CSM4532)
- M4500-48XF8C (XSM4556)
- M5300
- M5300-28G (GSM7228S)
- M5300-28G-POE+ (GSM7228PSv1h2)
- M5300-28G3 (GSM7328Sv2h2)
- M5300-28GF3 (GSM7328FSv2)
- M5300-52G (GSM7252S)
- M5300-52G-POE+ (GSM7252PSv1h2)
- M5300-52G3 (GSM7352Sv2h2)
- MSM4214X (TAA)
- Legacy Fully Managed Switch (12)
Looking for more about your product?
Get information, documentation, videos and more for your specific product.
Quick and easy solutions are available for you in the NETGEAR community. With NETGEAR’s round-the-clock premium support, help is just a phone call away. See Support Options NETGEAR provides complimentary technical support for NETGEAR products for 90 days from the original date of purchase. GearHead Support is a technical support service for NETGEAR devices and all other connected devices in your home. Advanced remote support tools are used to fix issues on any of your devices. The service includes support for the following: NETGEAR ProSUPPORT services are available to supplement your technical support and warranty entitlements. NETGEAR offers a variety of ProSUPPORT services that allow you to access NETGEAR's expertise in a way that best meets your needs:Can’t find what you’re looking for?
Need to Contact NETGEAR Support?
Complimentary Support
NETGEAR Premium Support
GearHead Support for Home Users
ProSUPPORT Services for Business Users