![D-Link DGS-3000-28SC [291/444] Arp spoofing prevention settings](/img/pdf.png)
D-Link DGS-3000-28SC [291/444] Arp spoofing prevention settings
![D-Link DGS-3000-28SC [291/444] Arp spoofing prevention settings](/views2/1459197/page291/bg123.png)
DGS-3000-28SC Layer 2 Managed Stackable Gigabit Switch Web UI Reference Guide
281
ARP Spoofing Prevention Settings
The user can configure the spoofing prevention entry to prevent spoofing of MAC for the protected gateway. When
an entry is created, those ARP packets whose sender IP matches the gateway IP of an entry, but its source MAC
field does not match the gateway MAC of the entry will be dropped by the system.
To view the following window, click Security > ARP Spoofing Prevention Settings as shown below.
Figure 8-53 ARP Spoofing Prevention Settings window
The fields that can be configured are described below:
Parameter Description
Gateway IP Address
Enter the gateway IP address to help prevent ARP Spoofing.
Gateway MAC Address
Enter the gateway MAC address to help prevent ARP Spoofing.
Ports
Enter the port numbers that this feature applies to. Alternatively the user can select
All Ports to apply this feature to all the ports of the switch.
Click the Apply button to accept the changes made.
Click the Delete All button to remove all the entries listed.
Click the Edit button to re-configure the specific entry.
Click the Delete button to remove the specific entry.
BPDU Attack Protection
This window is used to configure the BPDU protection function for the ports on the switch. In generally, there are
two states in BPDU protection function. One is normal state, and another is under attack state. The under attack
state have three modes: drop, block, and shutdown. A BPDU protection enabled port will enter an under attack
state when it receives one STP BPDU packet. And it will take action based on the configuration. Thus, BPDU
protection can only be enabled on the STP-disabled port.
BPDU protection has a higher priority than the FBPDU setting configured by configure STP command in the
determination of BPDU handling. That is, when FBPDU is configured to forward STP BPDU but BPDU protection is
enabled, then the port will not forward STP BPDU.
BPDU protection also has a higher priority than the BPDU tunnel port setting in determination of BPDU handling.
That is, when a port is configured as BPDU tunnel port for STP, it will forward STP BPDU. But if the port is BPDU
protection enabled. Then the port will not forward STP BPDU.
To view the following window, click Security > BPDU Attack Protection as shown below.
Содержание
- Dgs 3000 28sc layer 2 managed stackable gigabit switch web ui reference guide 2
- Table of contents 3
- Intended readers 11
- Notes notices and cautions 11
- Typographical conventions 11
- Chapter 1 web based switch configuration 12
- Introduction 12
- Login to the web manager 12
- Areas of the user interface 13
- Web based user interface 13
- Web pages 14
- Chapter 2 system configuration 15
- Device information 15
- System information settings 15
- Ddm settings 16
- Port configuration 16
- Ddm temperature threshold settings 17
- Ddm voltage threshold settings 18
- Ddm bias current threshold settings 19
- Ddm tx power threshold settings 20
- Ddm rx power threshold settings 21
- Ddm status table 22
- Port settings 23
- Port description settings 25
- Port error disabled 26
- Port media type 27
- Jumbo frame settings 28
- Port auto negotiation information 28
- Eee settings 29
- Serial port settings 30
- Trap settings 31
- Warning temperature settings 31
- System log configuration 32
- System log server settings 32
- System log settings 32
- System log 33
- System log trap settings 34
- System severity settings 35
- Time range settings 35
- Port group settings 36
- Time settings 36
- User accounts settings 37
- Command logging settings 38
- Configuration trap settings 38
- Stacking 39
- Stacking device table 41
- Stacking mode settings 41
- Chapter 3 management 42
- Static arp settings 42
- Arp table 43
- Proxy arp settings 43
- Gratuitous arp 44
- Gratuitous arp global settings 44
- Gratuitous arp settings 44
- Ipv6 neighbor settings 45
- Ip interface 46
- System ip address settings 46
- Interface settings 48
- Management settings 51
- Session table 52
- Single ip management 52
- Single ip settings 54
- Topology 55
- Firmware upgrade 61
- Configuration file backup restore 62
- Upload log file 62
- Snmp settings 63
- Snmp global settings 64
- Snmp traps settings 64
- Snmp linkchange traps settings 65
- Snmp view table settings 65
- Snmp community table settings 66
- Snmp group table settings 67
- Snmp engine id settings 68
- Snmp user table settings 68
- Snmp host table settings 69
- Snmp v6host table settings 70
- Rmon settings 71
- Snmp community encryption settings 71
- Snmp community masking settings 71
- Telnet settings 72
- Led state settings 73
- Power saving 73
- Power saving settings 73
- Web settings 73
- Power saving led settings 74
- Power saving port settings 75
- Chapter 4 l2 features 76
- Q vlan tags 78
- 1 2 3 4 79
- Cyclic redundancy check 4 octets 79
- Destination address 6 octets 79
- Dgs 3000 28sc layer 2 managed stackable gigabit switch web ui reference guide 79
- Dst mac src mac 79
- Ethertype 0x8100 79
- Mac length type beginning of data 79
- New tagged packet 79
- Original ethernet packet 79
- Source address 6 octets 79
- Tag control information 79
- Tag control information tci 79
- The ethertype and vlan id are inserted after the mac source address but before the original ethertype length or logical link control because the packet is now a bit longer than it was originally the cyclic redundancy check crc must be recalculated 79
- User prlorlty cfi vlan id vid 12 bits 79
- Q vlan settings 82
- V protocol group settings 84
- V protocol vlan 84
- V protocol vlan settings 85
- Asymmetric vlan settings 86
- Gvrp global settings 87
- Gvrp port settings 87
- Mac based vlan 88
- Mac based vlan settings 89
- Mac based vlan table 89
- Private vlan settings 90
- Pvid auto assign settings 91
- Vlan counter settings 91
- Voice vlan 92
- Voice vlan global settings 92
- Voice vlan port settings 93
- Voice vlan oui settings 94
- Voice vlan device 95
- Voice vlan lldp med voice device 95
- Surveillance vlan 96
- Surveillance vlan global settings 96
- Surveillance vlan port settings 96
- Surveillance vlan oui settings 97
- Surveillance vlan device 98
- Vlan trunk settings 98
- Browse vlan 99
- Show vlan ports 100
- Qinq settings 102
- Vlan translation port mapping settings 103
- Vlan translation settings 103
- Vlan translation profile list 104
- Layer 2 protocol tunneling settings 106
- Q 2005 mstp 107
- Spanning tree 107
- D 2004 rapid spanning tree 108
- Stp bridge global settings 109
- Stp port settings 110
- Mst configuration identification 112
- Mstp port information 113
- Stp instance settings 113
- Link aggregation 114
- Rstp multiprocess settings 114
- Port trunking settings 116
- Lacp port settings 117
- Multicast static fdb settings 118
- Static fdb settings 118
- Unicast static fdb settings 118
- Mac notification settings 119
- Mac address aging time settings 120
- Mac address table 121
- Arp fdb table 122
- Vlan learning settings 122
- Igmp proxy 123
- Igmp proxy settings 123
- L2 multicast control 123
- Igmp proxy downstream settings 124
- Igmp proxy group 124
- Igmp snooping 125
- Igmp snooping settings 125
- Igmp snooping rate limit settings 127
- Igmp snooping static group settings 128
- Igmp router port 129
- Igmp snooping forwarding table 130
- Igmp snooping group 130
- Igmp snooping counter 131
- Cpu filter l3 control packet settings 132
- Igmp snooping forward lookup mode settings 133
- Mld proxy 133
- Mld proxy settings 133
- Mld proxy downstream settings 134
- Mld proxy group 135
- Mld snooping 135
- Mld snooping settings 136
- Mld snooping rate limit settings 139
- Mld snooping static group settings 139
- Mld router port 140
- Mld snooping forwarding table 141
- Mld snooping group 141
- Mld snooping counter 142
- Mld snooping forward lookup mode settings 143
- Multicast vlan 143
- Igmp multicast group profile settings 144
- Igmp snooping multicast vlan settings 145
- Mld multicast group profile settings 147
- Mld snooping multicast vlan settings 148
- Ipv4 multicast filtering 150
- Ipv4 multicast profile settings 150
- Multicast filtering 150
- Ipv4 limited multicast range settings 151
- Ipv4 max multicast group settings 152
- Ipv6 multicast filtering 152
- Ipv6 multicast profile settings 152
- Ipv6 limited multicast range settings 153
- Ipv6 max multicast group settings 154
- Multicast filtering control packet 155
- Multicast filtering mode 155
- Erps settings 157
- Local loopback port settings 160
- Lldp global settings 161
- Lldp port settings 162
- Lldp basic tlvs settings 163
- Lldp management address list 163
- Lldp dot1 tlvs settings 164
- Lldp dot3 tlvs settings 165
- Lldp statistic system 166
- Lldp local port information 167
- Lldp remote port information 168
- Lldp med 169
- Lldp med system settings 169
- Lldp med port settings 170
- Lldp med local port information 171
- Lldp med remote port information 171
- Nlb fdb settings 172
- Chapter 5 l3 features 173
- Ipv4 route table 173
- Ipv4 static default route settings 173
- Ipv6 static default route settings 174
- Ip forwarding table 175
- Ipv6 route table 175
- Chapter 6 qos 177
- P default priority settings 178
- P settings 178
- P user priority settings 179
- Bandwidth control 180
- Bandwidth control settings 180
- P map settings 180
- Queue bandwidth control settings 182
- Traffic control settings 183
- Dscp trust settings 185
- Dscp map settings 186
- Hol blocking prevention 188
- Qos scheduling 188
- Scheduling settings 188
- Qos scheduling mechanism 189
- Sred settings 191
- Sred drop counter 192
- Acl configuration wizard 193
- Chapter 7 acl 193
- Access profile list 194
- Add an ethernet acl profile 195
- Adding an ipv4 acl profile 199
- Adding an ipv6 acl profile 204
- Adding a packet content acl profile 209
- Cpu access profile list 212
- Adding a cpu ethernet acl profile 213
- Adding a cpu ipv4 acl profile 216
- Adding a cpu ipv6 acl profile 221
- Adding a cpu packet content acl profile 224
- Acl finder 227
- Acl flow meter 227
- Egress access profile list 230
- Add an ethernet acl profile 231
- Adding an ipv4 acl profile 234
- Adding an ipv6 acl profile 238
- Egress acl flow meter 242
- Chapter 8 security 245
- X global settings 251
- X port settings 252
- X user settings 253
- Guest vlan settings 254
- Authenticator state 255
- Authenticator statistics 256
- Authenticator diagnostics 257
- Authenticator session statistics 257
- Initialize port based port s 258
- Initialize host based port s 259
- Reauthenticate port based port s 259
- Authentication radius server settings 260
- Radius 260
- Reauthenticate host based port s 260
- Radius authentication 261
- Radius account client 263
- Impb global settings 265
- Ip mac port binding impb 265
- Impb port settings 266
- Impb entry settings 268
- Mac block list 268
- Dhcp snooping 269
- Dhcp snooping maximum entry settings 269
- Dhcp snooping entry 270
- Dhcp snooping limit rate settings 270
- Nd snooping 271
- Nd snooping maximum entry settings 271
- Nd snooping entry 272
- Mac based access control mac 273
- Mac based access control settings 273
- Mac based access control port settings 274
- Mac based access control local settings 275
- Mac based access control authentication state 276
- Web based access control wac 277
- Wac global settings 278
- Wac port settings 280
- Wac user settings 280
- Wac authentication state 281
- Wac customize page 282
- Compound authentication 283
- Compound authentication settings 283
- Compound authentication guest vlan settings 285
- Compound authentication mac format settings 286
- Igmp access control settings 286
- Port security 287
- Port security settings 287
- Port security vlan settings 289
- Port security entries 290
- Arp spoofing prevention settings 291
- Bpdu attack protection 291
- Loopback detection settings 293
- Netbios filtering settings 294
- Rpc portmapper filter settings 294
- Traffic segmentation settings 295
- Dhcp server screening 296
- Dhcp server screening port settings 296
- Dhcp offer permit entry settings 297
- Filter dhcpv6 server 298
- Access authentication control 299
- Filter icmpv6 299
- Enable admin 300
- Authentication policy settings 301
- Accounting settings 302
- Application authentication settings 302
- Authentication server group settings 303
- Authentication server settings 305
- Login method lists settings 306
- Enable method lists settings 307
- Accounting method lists settings 308
- Local enable password settings 308
- Authentication source ip interface settings 309
- Ssl settings 311
- Ssl certification settings 312
- Ssh settings 313
- Ssh authentication method and algorithm settings 314
- Ssh user authentication list 316
- Dos attack prevention settings 317
- Trusted host settings 318
- Safeguard engine settings 319
- Sftp server settings 320
- Cpu protect settings 321
- Chapter 9 network application 322
- Dhcp relay 322
- Dhcp relay global settings 322
- Dhcp relay interface settings 325
- Dhcp relay vlan settings 325
- Dhcp relay option 60 server settings 326
- Dhcp relay option 60 settings 326
- Dhcp relay option 61 settings 327
- Dhcp relay port settings 328
- Dhcp relay option 82 port settings 329
- Dhcp relay server cvid settings 329
- Dhcpv6 relay 330
- Dhcpv6 relay global settings 330
- Dhcpv6 relay settings 330
- Dhcpv6 relay option 37 settings 331
- Dhcpv6 relay option 18 settings 332
- Dhcp local relay settings 333
- Dhcpv6 local relay settings 333
- Dns relay 334
- Dns relay global settings 334
- Dns relay static settings 334
- Dns resolver 335
- Dns resolver global settings 335
- Dns resolver static name server settings 335
- Dns resolver dynamic name server table 336
- Dns resolver static host name settings 336
- Dns resolver dynamic host name table 337
- Pppoe circuit id insertion settings 337
- Rcp server settings 338
- Sntp settings 339
- Time zone settings 339
- Flash file system settings 341
- Cfm settings 343
- Chapter 10 oam 343
- Cfm port settings 349
- Cfm loopback settings 350
- Cfm mipccm table 350
- Cfm linktrace settings 351
- Cfm packet counter 352
- Cfm fault table 353
- Cfm mp table 354
- Ethernet oam 354
- Ethernet oam settings 354
- Ethernet oam configuration settings 355
- Ethernet oam event log 356
- Ethernet oam statistics 357
- Duld settings 358
- Cable diagnostics 359
- Chapter 11 monitoring 361
- Cpu utilization 361
- Dram flash utilization 361
- Utilization 361
- Port utilization 362
- Packets 363
- Port statistics 363
- Received rx 363
- Statistics 363
- Umb_cast rx 364
- Transmitted tx 366
- Errors 367
- Received rx 367
- Transmitted tx 369
- Packet size 371
- Vlan counter statistics 373
- Mirror 374
- Port mirror settings 374
- Rspan settings 375
- Sflow global settings 376
- Sflow analyzer server settings 377
- Sflow flow sampler settings 378
- Broadcast ping reply settings 379
- Sflow counter poller settings 379
- Ping test 380
- Trace route 381
- Device environment 382
- Peripheral 382
- Chapter 12 save and tools 384
- Save configuration log 384
- Stacking information 384
- Download firmware 385
- From tftp 385
- From ftp 386
- From rcp 387
- From http 388
- To tftp 388
- Upload firmware 388
- To ftp 389
- To rcp 389
- Download configuration 390
- From tftp 390
- To http 390
- From ftp 391
- From http 392
- From rcp 392
- To tftp 393
- Upload configuration 393
- To ftp 394
- To rcp 394
- To http 395
- To ftp 396
- To tftp 396
- Upload log file 396
- To http 397
- To rcp 397
- Reboot system 398
- Appendix a password recovery procedure 400
- Appendix b system log entries 401
- Dgs 3000 28sc layer 2 managed stackable gigabit switch web ui reference guide 401
- The following table lists all possible entries and their corresponding meanings that will appear in the system log of this switch 401
- Dgs 3000 28sc layer 2 managed stackable gigabit switch web ui reference guide 402
- Dgs 3000 28sc layer 2 managed stackable gigabit switch web ui reference guide 403
- Dgs 3000 28sc layer 2 managed stackable gigabit switch web ui reference guide 404
- Dgs 3000 28sc layer 2 managed stackable gigabit switch web ui reference guide 405
- Dgs 3000 28sc layer 2 managed stackable gigabit switch web ui reference guide 406
- Dgs 3000 28sc layer 2 managed stackable gigabit switch web ui reference guide 407
- Dgs 3000 28sc layer 2 managed stackable gigabit switch web ui reference guide 408
- Dgs 3000 28sc layer 2 managed stackable gigabit switch web ui reference guide 409
- Dgs 3000 28sc layer 2 managed stackable gigabit switch web ui reference guide 410
- Dgs 3000 28sc layer 2 managed stackable gigabit switch web ui reference guide 411
- Dgs 3000 28sc layer 2 managed stackable gigabit switch web ui reference guide 412
- Dgs 3000 28sc layer 2 managed stackable gigabit switch web ui reference guide 413
- Dgs 3000 28sc layer 2 managed stackable gigabit switch web ui reference guide 414
- Dgs 3000 28sc layer 2 managed stackable gigabit switch web ui reference guide 415
- Dgs 3000 28sc layer 2 managed stackable gigabit switch web ui reference guide 416
- Dgs 3000 28sc layer 2 managed stackable gigabit switch web ui reference guide 417
- Dgs 3000 28sc layer 2 managed stackable gigabit switch web ui reference guide 418
- Dgs 3000 28sc layer 2 managed stackable gigabit switch web ui reference guide 419
- Dgs 3000 28sc layer 2 managed stackable gigabit switch web ui reference guide 420
- Dgs 3000 28sc layer 2 managed stackable gigabit switch web ui reference guide 421
- Dgs 3000 28sc layer 2 managed stackable gigabit switch web ui reference guide 422
- Dgs 3000 28sc layer 2 managed stackable gigabit switch web ui reference guide 423
- Dgs 3000 28sc layer 2 managed stackable gigabit switch web ui reference guide 424
- Dgs 3000 28sc layer 2 managed stackable gigabit switch web ui reference guide 425
- Dgs 3000 28sc layer 2 managed stackable gigabit switch web ui reference guide 426
- Dgs 3000 28sc layer 2 managed stackable gigabit switch web ui reference guide 427
- Dgs 3000 28sc layer 2 managed stackable gigabit switch web ui reference guide 428
- Dgs 3000 28sc layer 2 managed stackable gigabit switch web ui reference guide 429
- Dgs 3000 28sc layer 2 managed stackable gigabit switch web ui reference guide 430
- Dgs 3000 28sc layer 2 managed stackable gigabit switch web ui reference guide 431
- Dgs 3000 28sc layer 2 managed stackable gigabit switch web ui reference guide 432
- Dgs 3000 28sc layer 2 managed stackable gigabit switch web ui reference guide 433
- Appendix c trap log entries 434
- Dgs 3000 28sc layer 2 managed stackable gigabit switch web ui reference guide 434
- This table lists the trap logs found on the switch 434
- Dgs 3000 28sc layer 2 managed stackable gigabit switch web ui reference guide 435
- Dgs 3000 28sc layer 2 managed stackable gigabit switch web ui reference guide 436
- Dgs 3000 28sc layer 2 managed stackable gigabit switch web ui reference guide 437
- Dgs 3000 28sc layer 2 managed stackable gigabit switch web ui reference guide 438
- Dgs 3000 28sc layer 2 managed stackable gigabit switch web ui reference guide 439
- Dgs 3000 28sc layer 2 managed stackable gigabit switch web ui reference guide 440
- Dgs 3000 28sc layer 2 managed stackable gigabit switch web ui reference guide 441
- Appendix d radius attributes assignment 442
Похожие устройства
- D-Link DGS-3120-24SC/*EI Руководство пользователя _CLI_
- D-Link DGS-3120-24SC/*EI Руководство по установке
- D-Link DGS-3120-24SC/*EI Руководство пользователя _Web UI_
- D-Link DGS-3427 Руководство пользователя _CLI_
- D-Link DGS-3427 Руководство пользователя _Web UI_
- D-Link DXS-3400-24SC Руководство по установке
- D-Link DXS-3400-24SC Руководство пользователя _CLI_
- D-Link DXS-3400-24SC Руководство пользователя _Web UI_
- D-Link DXS-3400-24TC Руководство пользователя _CLI_
- D-Link DXS-3400-24TC Руководство по установке
- D-Link DXS-3400-24TC Руководство пользователя _Web UI_
- D-Link DGS-3120-24PC/*RI Краткое руководство по установке
- D-Link DGS-3120-24PC/*RI Руководство по установке
- D-Link DGS-3120-24PC/*RI Руководство пользователя _Web UI_
- D-Link DGS-3120-24PC/*RI Руководство пользователя _CLI_
- D-Link DGS-3120-24SC/*RI Руководство по установке
- D-Link DGS-3120-24SC/*RI Руководство пользователя _CLI_
- D-Link DGS-3120-24SC/*RI Руководство пользователя _Web UI_
- D-Link DGS-3120-24TC/*RI Краткое руководство по установке
- D-Link DGS-3120-24TC/*RI Руководство по установке
Скачать
Случайные обсуждения
Ответы 1
Как открыть окно настроек информации о системе веб-интерфейса коммутатора DGS-3000-28SC?
2 года назад
Ответы 1
Какие поля можно настроить в DGS-3000-28SC Layer 2 Managed Stackable Gigabit Switch?
1 год назад