D-Link DGS-1210-12TS/ME [100/159] Security smart binding smart binding

Содержание

Похожие устройства

4 Configuration DGS 1210 series Metro Ethernet Managed Switch User Manual Figure 4 136 Security Smart Binding Smart Binding Settings The Smart Binding Settings page contains the following fields From Port To Port Select a range of ports to set for IP MAC port binding Admin State Use the drop down menu to enable or disable these ports for Smart Binding Enabled Enable Smart Binding with related configurations to the ports Disabled Disable Smart Binding ARP Inspection If ARP inspection is enabled the Switch will inspect incoming ARP packets and compare them with the Switch s Smart Binding white list entries If the IP MAC pair of an ARP packet is not found in the white list the Switch will block the MAC address A major benefit of Loose state is that it uses less CPU resources However it cannot block malicious users who send only unicast IP packets An example of this is that a malicious user can perform DoS attacks by statically configuring the ARP table on their PC In this case the Switch cannot block such attacks because the PC will not send out ARP packets IP Inspection When IP Inspection is enabled and ARP Inspection is disabled all non IP packets are forwarded by default If ARP Inspection and IP Inspection mode are enabled the Switch will inspect all incoming ARP and IP packets and compare them to the IMPB white list If the IP MAC pair find a match in the white list the packets from that MAC address are unblocked If not the MAC address will stay blocked While the mode examines every ingress ARP and IP packet it enforces better security Allow Zero IP Enable or disable to allow zero IP to configure the state which allows ARP packets with 0 0 0 0 source IP to bypass Forward DHCP Packet Enable or disable to forward DHCP packet DHCP Snooping By enable DHCP Snooping the switch will snoop the packets sent from DHCP Server and clients and update information to the White List Max Entry Specifies the max entries of Smart Binding The range is between 1 and 10 or No Limit Max Entry IPv6 Specifies the IPv6 max entries of Smart Binding The range is between 1 and 10 or No Limit Click Apply to make configurations make effects Security Smart Binding Smart Binding The Smart Binding page allows the user to create Static IP MAC Port Binding entries on the Switch 93