SW_DAI-4-DHCP_SNOOPING_DENY: 1 Invalid ARPs (Res) on ten1/0/1

[Miguel Angel Vazquez]

hello team,

currently have device C9606R with Cisco IOS XE Software, Version 17.09.06. and I have connected with Fortigate by SFP-10GBase-SR" When pinging between both equipment
show me the following message.

%SW_DAI-4-DHCP_SNOOPING_DENY: 1 Invalid ARPs (Res) on ten1/0/1, vlan 100.([e81c.baab.6436/10.10.10.1/a410.b609.0405/10.10.10.2/

I solved this issue with the following command

over the interface.

(config-if)#ip arp inspection trust

on my case use ten1/0/1

in my case both device be reachable

Regards

[paul driver]

Hello
That error log is informing you that they was a invalid arp seen in the snooping binding D/B for DAI, which means its now seeing a different arp entry to what is has logged for that interface, when you have then trusted the  DIA enabled interface then the inconsistency is ignored.

The other way to have fixed it would be to have attached the same device that was attached to before DIA reported it or apply a static DIA filter that will bypass the checking of the snooping D/B