ZyXEL Communications MES3500 Series, User Manual

Page: 220 / 370

Chapter 27 IP Source Guard
MES3500 Series User’s Guide
220
27.2 IP Source Guard
Use this screen to look at the current bindings for DHCP snooping and ARP inspection. Bindings are
used by DHCP snooping and ARP inspection to distinguish between authorized and unauthorized
packets in the network. The Switch learns the bindings by snooping DHCP packets (dynamic
bindings) and from information provided manually by administrators (static bindings). To open this
screen, click
Advanced Application > IP Source Guard .
Figure 123
Advanced Application > IP Source Guard
The following table describes the labels in this screen.
27.3 IP Source Guard Static Binding
Use this screen to manage static bindings for DHCP snooping and ARP inspection. Static bindings
are uniquely identified by the MAC address and VLAN ID. Each MAC address and VLAN ID can only
be in one static binding. If you try to create a static binding with the same MAC address and VLAN
ID as an existing static binding, the new static binding replaces the original one. To open this
screen, click
Advanced Application > IP Source Guard > Static Binding .
Table 87
Advanced Application > IP Source Guard
LABEL DESCRIPTION
Index This field displays a sequential number for each binding.
MAC Address This field displays the source MAC address in the binding.
IP Address This field displays the IP address assigned to the MAC address in the binding.
Lease This field displays how many days, hours, minutes, and seconds the binding is valid; for
example,
2d3h4m5s means the binding is still valid for 2 days, 3 hours, 4 minutes and 5
seconds. This field displays infinity if the binding is always valid (for example, a static
binding).
Type This field displays how the Switch learned the binding.
static : This binding was learned from information provided manually by an administrator.
dhcp-snooping : This binding was learned by snooping DHCP packets.
VID This field displays the source VLAN ID in the binding.
Port This field displays the port number in the binding. If this field is blank, the binding applies to
all ports.