Dynamic ARP Inspection Configuration – Address Verification

Destination MAC - Checks the destination MAC address in the Ethernet header against the target MAC address in ARP body

Source MAC - Checks the source MAC address in the Ethernet header against the sender MAC address in the ARP body

IP address - Checks the ARP body for invalid and unexpected IP addresses including addresses 0.0.0.0, 255.255.255.255, and all IP multicast addresses

DAI can also be configured to check for both destination or source MAC and IP addresses: