ZyXEL Communications XGS2220 Series, Руководство пользователя

Страница: 486 / 655

Chapter 73 IP Source Guard
XGS2220 Series User’s Guide
486
• Static bindings. Use this to create static bindings in the binding table.
• DHCP snooping. Use this to filter unauthorized DHCP packets on the network and to build the binding
table dynamically.
• ARP inspection. Use this to filter unauthorized ARP packets on the network.
If you want to use dynamic bindings to filter unauthorized ARP packets (typical implementation), you
have to enable DHCP snooping before you enable ARP inspection.
73.2 IPv4 Source Guard
Use this screen to look at the current bindings for DHCP snooping and ARP inspection. Bindings are used
by DHCP snooping and ARP inspection to distinguish between authorized and unauthorized packets in
the network. The Switch learns the bindings by snooping DHCP packets (dynamic bindings) and from
information provided manually by administrators (static bindings). To open this screen, click
SECURITY >
IPv4 Source Guard > IP Source Guard .
Figure 356 SECURITY > IPv4 Source Guard > IP Source Guard
The following table describes the labels in this screen.
73.3 IPv4 Source Guard Static Binding
Use this screen to manage static bindings for DHCP snooping and ARP inspection. Static bindings are
uniquely identified by the MAC address and VLAN ID. Each MAC address and VLAN ID can only be in
one static binding. If you try to create a static binding with the same MAC address and VLAN ID as an
existing static binding, the new static binding replaces the original one. To open this screen, click
SECURITY > IPv4 Source Guard > IP Source Guard > Static Binding .
Table 277 SECURITY > IPv4 Source Guard > IP Source Guard
LABEL DESCRIPTION
Index This field displays a sequential number for each binding.
IP Address This field displays the IP address assigned to the MAC address in the binding.
VID This field displays the source VLAN ID in the binding.
MAC Address This field displays the source MAC address in the binding.
Port This field displays the port number in the binding. If this field is blank, the binding applies to all
ports.
Lease This field displays how many days, hours, minutes, and seconds the binding is valid; for
example,
2d3h4m5s means the binding is still valid for 2 days, 3 hours, 4 minutes, and 5
seconds. This field displays infinity if the binding is always valid (for example, a static binding).
Type This field displays how the Switch learned the binding.
static : This binding was learned from information provided manually by an administrator.
dhcp-snooping : This binding was learned by snooping DHCP packets.