Netgear M5300-28G-POE+ (GSM7228PSv1h2) - 12-Port Managed Gigabit Switch Ratgeber Für Administratoren
296
|
Chapter 15. Security Management
ProSafe Managed Switch
c. Click Apply. A screen similar to the following displays.
DHCP Snooping
DHCP snooping is a security feature that monitors DHCP messages between a DHCP client
and DHCP server to filter harmful DHCP message and to build a bindings database of (MAC
address, IP address, VLAN ID, port) tuples that are considered authorized. The network
administrator enables DHCP snooping globally and on specific VLANs and configures ports
within the VLAN to be trusted or untrusted. DHCP servers must be reached through trusted
ports.
and DHCP server to filter harmful DHCP message and to build a bindings database of (MAC
address, IP address, VLAN ID, port) tuples that are considered authorized. The network
administrator enables DHCP snooping globally and on specific VLANs and configures ports
within the VLAN to be trusted or untrusted. DHCP servers must be reached through trusted
ports.
Figure 33. DHCP Snooping
The example is shown as CLI commands and as a Web interface procedure.
CLI: Configure DHCP Snooping
1.
Enable DHCP snooping globally.
(Netgear Switch) (Config)# ip dhcp snooping
Interface 1/0/1
Interface 1/0/1
GSM73xxS
DHCP server
DHCP client