OLT2406 User’s Guide
224
C
HAPTER
27
IP Source Guard
27.1 IP Source Guard Overview
Use IP source guard to filter unauthorized DHCP and ARP packets in your network.
IP source guard uses a binding table to distinguish between authorized and unauthorized DHCP and
ARP packets in your network. A binding contains these key attributes:
• MAC address
• VLAN ID
• IP address
• Port number
When the OLT receives a DHCP or ARP packet, it looks up the appropriate MAC address, VLAN ID, IP
address, and port number in the binding table. If there is a binding, the OLT forwards the packet. If there
is not a binding, the OLT discards the packet.
27.1.1 What You Can Do
• Use the
IP Source Guard Setup
screen (
) to look at the current bindings for
DHCP snooping and ARP inspection.
• Use the
IP Source Guard Static Binding
screen (
) to manage static bindings
for DHCP snooping and ARP inspection.
• Use the
DHCP Snooping
screen (
) to look at various statistics about the DHCP
snooping database.
• Use this
DHCP Snooping Configure
screen (
) to enable DHCP snooping on
the OLT (not on specific VLAN), specify the VLAN where the default DHCP server is located, and
configure the DHCP snooping database.
• Use the
DHCP Snooping Port Configure
screen (
) to specify whether ports
are trusted or untrusted ports for DHCP snooping.
• Use the
DHCP Snooping VLAN Configure
) to enable DHCP
snooping on each VLAN and to specify whether or not the OLT adds DHCP relay agent option 82
information to DHCP requests that the OLT relays to a DHCP server for each VLAN.
• Use the
ARP Inspection Status
) to look at the current list of MAC
address filters that were created because the OLT identified an unauthorized ARP packet.
• Use the
ARP Inspection VLAN Status
screen (
) to look at various statistics
about ARP packets in each VLAN.
• Use the
ARP Inspection Log Status
) to look at log messages that
were generated by ARP packets and that have not been sent to the syslog server yet.
• Use the
ARP Inspection Configure
) to enable ARP inspection on the
OLT. You can also configure the length of time the OLT stores records of discarded ARP packets and
global settings for the ARP inspection log.
Содержание OLT2406
Страница 4: ...Document Conventions OLT2406 User s Guide 4 Desktop Laptop Switch IP Phone Smart T V...
Страница 32: ...Table of Contents OLT2406 User s Guide 32 Index 758...
Страница 33: ...33 PART I Introduction and Hardware Installation...
Страница 62: ...Chapter 3 Maintenance OLT2406 User s Guide 62 Figure 36 Slide the Power Module In and Tighten the Thumbscrews...
Страница 63: ...63 PART II Web Configurator...
Страница 118: ...Chapter 9 VLAN OLT2406 User s Guide 118 Figure 74 Advanced Application VLAN VLAN Status Static VLAN...
Страница 138: ...Chapter 14 Spanning Tree Protocol OLT2406 User s Guide 138 Figure 86 Advanced Application Spanning Tree Protocol MSTP...
Страница 161: ...Chapter 18 Link Aggregation OLT2406 User s Guide 161 Your trunk group 1 T1 configuration is now complete...
Страница 179: ...Chapter 21 Classifier OLT2406 User s Guide 179 Figure 112 Classifier Example...
Страница 182: ...Chapter 22 Policy Rule OLT2406 User s Guide 182 Figure 113 Advanced Application Policy Rule...
Страница 186: ...Chapter 22 Policy Rule OLT2406 User s Guide 186 Figure 114 Policy Example...
Страница 210: ...Chapter 25 Multicast OLT2406 User s Guide 210 Figure 126 Advanced Application Multicast Multicast Setting MVR...
Страница 248: ...Chapter 28 Loop Guard OLT2406 User s Guide 248 Figure 151 Advanced Application Loop Guard...
Страница 393: ...393 PART III CLI Commands...
Страница 581: ...Chapter 78 VoIP OLT2406 User s Guide 581...
Страница 725: ...725 PART IV Troubleshooting Specifications Appendices and Index...
