Chapter 14
Network Security
Network Security module is to provide the multiple protection measures for the network
security, including five submenus:
IP-MAC Binding
,
DHCP Snooping, ARP Inspection
,
IP
Source Guard, DoS Defend
and
802.1X
. Please configure the functions appropriate to your
need.
14.1
IP-MAC Binding
The IP-MAC Binding function allows you to bind the IP address, MAC address, VLAN ID and the
connected Port number of the Host together. Basing on the IP-MAC binding table, ARP
Inspection and IP Source Guard functions can control the network access and only allow the
Hosts matching the bound entries to access the network.
The following two IP-MAC Binding methods are supported by the switch.
1.
Manually: You can manually bind the IP address, MAC address, VLAN ID and the Port
number together in the condition that you have got the related information of the Hosts in
the LAN.
2.
DHCP Snooping: You can use DHCP Snooping functions to monitor the process of the
Host obtaining the IP address from DHCP server, and record the IP address, MAC
address, VLAN and the connected Port number of the Host for automatic binding.
The two methods are also considered as the sources of the IP-MAC Binding entries. The
entries from different sources should be different from the other to avoid collision. Only the
entry from the source with the higher priority will take effect. The priority of Manual is higher
than that of Snooping.
The
IP-MAC Binding
function is implemented on the
Binding Table
and
Manual Binding
pages.
14.1.1
Binding Table
On this page, you can view the information of the bound entries.
Choose the menu
Network Security
→
IP-MAC Binding
→Binding Table
to load the following
page.
Figure 14-1 Binding Table
Configuration Procedure:
Select a source type and click
Search
to search the specified type of entry.
335
