S1700 Managed Series Ethernet Switches
Web User Manual
9 Security
Issue 05 (2012-10-25)
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
154
Step 1
Click Security> DHCP Snooping.
Step 2
Click Binding Table Information in Tab.
Step 3
Click the Export button to save the binding table to the local PC with a format of “*.cfg”.
----End
Search binding table.
Step 1
Click Security> DHCP Snooping.
Step 2
Click Binding Table Information in Tab.
Step 3
Choose the Search mode from the drop-down box, click the Query button and the result will
display on binding table list.
----End
Delete binding table.
Step 1
Click Security> DHCP Snooping.
Step 2
Click Binding Table Information in Tab.
Step 3
Click the Delete button on the lower right of the page, choose the delete mode and input the
specific parameter, click the Delete button to apply.
----End
9.9 IPSG
IPSG (IP Source Guard) is a filtering technology based on IP / MAC / VLAN interface traffic,
which can prevent the LAN IP address from spoofing attacks. The switch has an internal IP
source binding table which sets as the testing standard for the received packets in each
interface.
Only the received IP packets correspond to the IP/ MAC / VLAN mapping relationship in IP
source binding table, will these packets be forward by switch.
The remaining packets will be discarded by the switch.
IP source binding table can be added by user statically, and obtained through Dynamic ARP or
learned from DHCP Snooping binding table automatically.
9.9.1 IPSG Settings
Click Security> IPSG> IPSG Settings to configure IPSG for interface, the configuration page
is displayed as follows.