A network administrator configures Dynamic ARP Inspection on a switch. After Dynamic ARP Inspection is applied, all users on that switch are unable to communicate with any destination. The network administrator checks the interface status of all interfaces, and there is no err-disabled interface.
What is causing this problem?
- DHCP snooping has not been enabled on all VLANs.
- The ip arp inspection limit command is applied on all interfaces and is blocking the traffic of all users.
- Dynamic ARP Inspection has not been enabled on all VLANs
- The no ip arp inspection trust command is applied on all user host interfaces
Answer(s): D
Explanation:
Dynamic ARP inspection (DAI) is a security feature that validates ARP packets in a network. It intercepts, logs, and discards ARP packets with invalid IP-to-MAC address bindings. This capability protects the network from certain man-in-the-middle attacks. After enabling DAI, all ports become untrusted ports.