If you are in a situation where running DAI is an option , the default behavior is to rate limit arp requests to 15pps - 20pps , most " IP Scanners" greatly exceed this threshold. the default behavior is to err-disable (p-arp inspection) this port. ...