Zyxel IES-5112 [45/1156] Arp inspection

Zyxel IES-6000 [45/1156] Arp inspection
Chapter 1 Getting to Know Your MSC
Management Switch Card User’s Guide
45
Console Port
Use the console port for local management.
DHCP Relay
DHCP (Dynamic Host Configuration Protocol RFC 2131 and RFC 2132) allows individual computers
to obtain TCP/IP configuration at start-up from a server. You can configure the system as a DHCP
relay agent to have another DHCP server provide TCP/IP configuration for the clients. In addition,
you can set the system to forward client DHCP requests to specific DHCP servers based on the VLAN
ID. You can also specify up to two DHCP servers for each VLAN to provide fail-over protection.
DHCP Relay Option82
The system supports DHCP relay agent82 (RFC 3046) that adds additional information to client
DHCP requests that the MSC relays to a DHCP server. It also supports adding the sub-option 2
(Remote ID) with additional information.
DHCP Snooping
DHCP snooping allows the system to identify packets with DHCP server assigned IP address(es) and
block access of devices using unknown IP addresses on a subscriber port. You can also manually
add static IP addresses to the DHCP snooping table.
LAN 2 LAN
LAN 2 LAN allows you to control whether or not a DHCP server connected to a subscriber port is
permitted to receive and send traffic through the IES.
Anti-IP Address Spoofing
With DHCP snooping, a line card records which IP address is assigned to each DHCP client MAC
address and the VLAN to which each IP and MAC address pair belongs. The line card drops packets
from a device using an IP address that is assigned to a different MAC address.
ARP Inspection
ARP inspection drops ARP packets if the MAC address to IP address binding does not match that of
a learned or manually added trusted client. This prevents many common man-in-the-middle
attacks.
Upstream Broadcast Storm Control
Broadcast storm control lets you set limits for how many broadcast, multicast and destination
lookup failure (DLF) packets a port receives per second from the subscriber.

Содержание

Скачать