
Chapter 25 IP Source Guard
GS2200-24/24P User’s Guide
222
• Use the ARP Inspection Status screen (
) to look at
the current list of MAC address filters that were created because the Switch
identified an unauthorized ARP packet.
• Use the ARP Inspection VLAN Status screen (
) to
look at various statistics about ARP packets in each VLAN.
• Use the ARP Inspection Log Status screen (
) to look
at log messages that were generated by ARP packets and that have not been
sent to the syslog server yet.
• Use the ARP Inspection Configure screen (
) to
enable ARP inspection on the Switch. You can also configure the length of time
the Switch stores records of discarded ARP packets and global settings for the
ARP inspection log.
• Use the ARP Inspection Port Configure screen (
)
to specify whether ports are trusted or untrusted ports for ARP inspection.
• Use the ARP Inspection VLAN Configure screen (
) to enable ARP inspection on each VLAN and to specify when the Switch
generates log messages for receiving ARP packets from each VLAN.
25.1.2 What You Need to Know
The Switch builds the binding table by snooping DHCP packets (dynamic bindings)
and from information provided manually by administrators (static bindings).
IP source guard consists of the following features:
• Static bindings. Use this to create static bindings in the binding table.
• DHCP snooping. Use this to filter unauthorized DHCP packets on the network
and to build the binding table dynamically.
• ARP inspection. Use this to filter unauthorized ARP packets on the network.
If you want to use dynamic bindings to filter unauthorized ARP packets (typical
implementation), you have to enable DHCP snooping before you enable ARP
inspection.
25.2 IP Source Guard
Use this screen to look at the current bindings for DHCP snooping and ARP
inspection. Bindings are used by DHCP snooping and ARP inspection to distinguish
between authorized and unauthorized packets in the network. The Switch learns
the bindings by snooping DHCP packets (dynamic bindings) and from information
Содержание GS2200-24P Series
Страница 2: ......
Страница 8: ...Safety Warnings GS2200 24 User s Guide 8...
Страница 22: ...22...
Страница 28: ...Chapter 1 Getting to Know Your Switch GS2200 24 24P User s Guide 28...
Страница 32: ...Chapter 2 Hardware Installation and Connection GS2200 24 24P User s Guide 32...
Страница 40: ...Chapter 3 Hardware Panels GS2200 24 24P User s Guide 40...
Страница 42: ...42...
Страница 52: ...Chapter 4 The Web Configurator GS2200 24 24P User s Guide 52...
Страница 90: ...Chapter 8 Basic Setting GS2200 24 24P User s Guide 90...
Страница 92: ...92...
Страница 110: ...Chapter 9 VLAN GS2200 24 24P User s Guide 110 Figure 58 Port Based VLAN Setup Port Isolation...
Страница 116: ...Chapter 10 Static MAC Forward Setup GS2200 24 24P User s Guide 116...
Страница 144: ...Chapter 13 Spanning Tree Protocol GS2200 24 24P User s Guide 144...
Страница 148: ...Chapter 14 Bandwidth Control GS2200 24 24P User s Guide 148...
Страница 152: ...Chapter 15 Broadcast Storm Control GS2200 24 24P User s Guide 152...
Страница 156: ...Chapter 16 Mirroring GS2200 24 24P User s Guide 156...
Страница 166: ...Chapter 17 Link Aggregation GS2200 24 24P User s Guide 166...
Страница 174: ...Chapter 19 Port Security GS2200 24 24P User s Guide 174...
Страница 186: ...Chapter 21 Policy Rule GS2200 24 24P User s Guide 186...
Страница 208: ...Chapter 23 Multicast GS2200 24 24P User s Guide 208...
Страница 246: ...Chapter 25 IP Source Guard GS2200 24 24P User s Guide 246...
Страница 255: ...255 PART IV IP Application Static Route 257 Differentiated Services 261 DHCP 265...
Страница 256: ...256...
Страница 260: ...Chapter 28 Static Route GS2200 24 24P User s Guide 260...
Страница 274: ...274...
Страница 304: ...Chapter 32 Access Control GS2200 24 24P User s Guide 304...
Страница 310: ...Chapter 34 Syslog GS2200 24 24P User s Guide 310...
Страница 318: ...Chapter 35 Cluster Management GS2200 24 24P User s Guide 318...
Страница 322: ...Chapter 36 MAC Table GS2200 24 24P User s Guide 322...
Страница 327: ...327 PART VI Troubleshooting Product Specifications Troubleshooting 329 Product Specifications 333...
Страница 328: ...328...
Страница 340: ...Chapter 40 Product Specifications GS2200 24 24P User s Guide 340...
Страница 341: ...341 PART VII Appendices and Index Changing a Fuse 343 Common Services 345 Legal Information 349 Index 353...
Страница 342: ...342...
Страница 344: ...Appendix A Changing a Fuse GS2200 24 24P User s Guide 344...
Страница 352: ...Appendix C Legal Information GS2200 24 24P User s Guide 352...