ZyXEL Communications ONU-2024 Series, User Manual

Page: 166 / 268

Chapter 21 IP Source Guard
ONU User’s Guide
166
The following table describes the labels in this screen.
Table 59 ARP Inspection Configure
LABEL DESCRIPTION
Active Select this to enable ARP inspection on the ONU. You still have to enable
ARP inspection on specific VLAN and specify trusted ports.
Filter Aging Time
Filter aging time This setting has no effect on existing MAC address filters.
Enter how long (1-2147483647 seconds) the MAC address filter remains in
the ONU after the ONU identifies an unauthorized ARP packet. The ONU
automatically deletes the MAC address filter afterwards. Enter 0 if you
want the MAC address filter to be permanent.
Log Profile
Log buffer size Enter the maximum number (1-1024) of log messages that were generated
by ARP packets and have not been sent to the syslog server yet. Make
sure this number is appropriate for the specified
Syslog rate and Log
interval .
If the number of log messages in the ONU exceeds this number, the ONU
stops recording log messages and simply starts counting the number of
entries that were dropped due to unavailable buffer. Click
Clearing log
status table in the ARP Inspection Log Status screen to clear the log
and reset this counter. See Section 21.4.1 on page 164 .
Syslog rate Enter the maximum number of syslog messages the ONU can send to the
syslog server in one batch. This number is expressed as a rate because
the batch frequency is determined by the
Log Interval . You must configure
the syslog server ( Chapter 29 on page 219 ) to use this. Enter 0 if you do
not want the ONU to send log messages generated by ARP packets to the
syslog server.
The relationship between
Syslog rate and Log interval is illustrated in the
following examples:
•
4 invalid ARP packets per second, Syslog rate is 5, Log interval is 1:
the ONU sends 4 syslog messages every second.
• 6 invalid ARP packets per second, Syslog rate is 5, Log interval is 2:
the ONU sends 10 syslog messages every 2 seconds.
Log interval Enter how often (1-86400 seconds) the ONU sends a batch of syslog
messages to the syslog server. Enter 0 if you want the ONU to send syslog
messages immediately. See
Syslog rate for an example of the
relationship between Syslog rate and Log interval .
Apply Click Apply to save your changes to the ONU’s run-time memory. The
ONU loses these changes if it is turned off or loses power, so use the Save
link on the top navigation panel to save your changes to the non-volatile
memory when you are done configuring.
Cancel Click this to reset the values in this screen to their last-saved values.