ZyXEL Communications MES3500-24, User Manual

Page: 226 / 349

Chapter 26 IP Source Guard
MES3500-24/24F User’s Guide
226
26.6 ARP Inspection Status
Use this screen to look at the current list of MAC address filters that were created because the
Switch identified an unauthorized ARP packet. When the Switch identifies an unauthorized ARP
packet, it automatically creates a MAC address filter to block traffic from the source MAC address
and source VLAN ID of the unauthorized ARP packet. To open this screen, click Advanced
Application > IP Source Guard > ARP Inspection.
Figure 118
ARP Inspection Status
The following table describes the labels in this screen.
End VID Enter the highest VLAN ID you want to manage in the section below.
Apply Click this to display the specified range of VLANs in the section below.
VID This field displays the VLAN ID of each VLAN in the range specified above. If you configure the
* VLAN, the settings are applied to all VLANs.
Enabled Select Yes to enable DHCP snooping on the VLAN. You still have to enable DHCP snooping on
the Switch and specify trusted ports.
Note: The Switch will drop all DHCP requests if you enable DHCP snooping and there are no
trusted ports.
Option82 Select this to have the Switch add the slot number, port number and VLAN ID to DHCP
requests that it broadcasts to the DHCP VLAN, if specified, or VLAN. You can specify the DHCP
VLAN in the DHCP Snooping Configure screen. See
Section 26.5 on page 222 .
Information Select this to have the Switch add the system name to DHCP requests that it broadcasts to the
DHCP VLAN, if specified, or VLAN. You can configure the system name in the General Setup
screen. See
Chapter 8 on page 86 . You can specify the DHCP VLAN in the DHCP Snooping
Configure screen. See Section 26.5 on page 222 .
Apply Click Apply to save your changes to the Switch’s run-time memory. The Switch loses these
changes if it is turned off or loses power, so use the Save link on the top navigation panel to
save your changes to the non-volatile memory when you are done configuring.
Cancel Click this to reset the values in this screen to their last-saved values.
Table 80
DHCP Snooping VLAN Configure (continued)
LABEL DESCRIPTION
Table 81
ARP Inspection Status
LABEL DESCRIPTION
Total number
of filters This field displays the current number of MAC address filters that were created because the
Switch identified unauthorized ARP packets.
Index This field displays a sequential number for each MAC address filter.
MAC Address This field displays the source MAC address in the MAC address filter.
VID This field displays the source VLAN ID in the MAC address filter.
Port This field displays the source port of the discarded ARP packet.