A switch-level security feature that validates ARP packets against a trusted binding table (DHCP snooping table). Untrusted ARP replies are dropped. > - **DHCP Snooping** — Creates a binding table of IP-to-MAC-to-port mappings from legitimate DHCP transactions. DAI uses this table for validation. >