Loading ...
Loading ...
Loading ...
4 Configuration DES-1210/ME Series Metro Ethernet Managed Switch User Manual
8
8
3
3
Figure 4.131 – Security > Smart Binding > Smart Binding Settings
The Smart Binding Settings page contains the following fields:
From Port/ To Port: Select a range of ports to set for IP-MAC-port binding.
Admin State: Use the drop-down menu to enable or disable these ports for Smart Binding.
Enabled –Enable Smart Binding with related configurations to the ports
Disabled –Disable Smart Binding.
ARP Inspection: If ARP inspection is enabled, the Switch will inspect incoming ARP packets and compare
them with the Switch’s Smart Binding white list entries. If the IP-MAC pair of an ARP packet is not found in
the white list, the Switch will block the MAC address. A major benefit of Loose state is that it uses less CPU
resources. However, it cannot block malicious users who send only unicast IP packets. An example of this is
that a malicious user can perform DoS attacks by statically configuring the ARP table on their PC. In this
case, the Switch cannot block such attacks because the PC will not send out ARP packets.
IP Inspection: When IP Inspection is enabled, and ARP Inspection is disabled, all non-IP packets are
forwarded by default. If ARP Inspection and IP Inspection mode are enabled, the Switch will inspect all
incoming ARP and IP packets and compare them to the IMPB white list. If the IP-MAC pair find a match in
the white list, the packets from that MAC address are unblocked. If not, the MAC address will stay blocked.
While the mode examines every ingress ARP and IP packet, it enforces better security.
Allow Zero IP: Enable or disable to allow zero IP to configure the state which allows ARP packets with
0.0.0.0 source IP to bypass.
Forward DHCP Packet: Enable or disable to forward DHCP packet.
DHCP Snooping: By enable DHCP Snooping, the switch will snoop the packets sent from DHCP Server and
clients, and update information to the White List. When enabled, the user can enter the DHCPv4 & DHCPv6
Vlan List.
Max Entry: Specifies the max entries of Smart Binding. The range is between 1 and 10, or No Limit.
Max Entry(IPv6): Specifies the IPv6 max entries of Smart Binding. The range is between 1 and 10, or No
Limit.
Click Apply to make configurations make effects.
Security > Smart Binding > Smart Binding
The Smart Binding Settings page allows the user to create Static IP-MAC-Port Binding entries on the Switch.
Loading ...
Loading ...
Loading ...