Netgear M5300-28G-POE+ (GSM7228PSv1h2) - 12-Port Managed Gigabit Switch Ratgeber Für Administratoren
Chapter 15. Security Management
|
289
ProSafe Managed Switch
dynamic ARP inspection. A static mapping associates an IP address to a MAC address on a
VLAN.
VLAN.
Figure 32. Dynamic ARP inspection
CLI: Configure Dynamic ARP Inspection
1.
Enable DHCP snooping globally.
2.
Enable DHCP snooping in a VLAN.
3.
Configure the port through which the DHCP server is reached as trusted.
(Netgear Switch) (Config)# ip dhcp snooping
(Netgear Switch) (Config)# ip dhcp snooping vlan 1
(Netgear Switch) (Config)# interface 1/0/1
(Netgear Switch) (Interface 1/0/1)# ip dhcp snooping trust
Static client
IP address: 192.168.10.1
HW address: 00:11:85:EE:54:E9
IP address: 192.168.10.1
HW address: 00:11:85:EE:54:E9
Interface
1/0/2
1/0/2
GSM73xxS
Interface
1/0/1
1/0/1
Interface
1/0/3
1/0/3
DHCP server
IP address: 192.168.10.1
IP address: 192.168.10.1
DHCP client
IP address: 192.168.10.86 (obtained)
HW address: 00:16:76:A7:88:CC
IP address: 192.168.10.86 (obtained)
HW address: 00:16:76:A7:88:CC