Netgear GSM7328Sv2 - ProSAFE 24+4 Gigabit Ethernet L3 Managed Stackable Switch 管理员指南
268
|
Chapter 14. Security Management
ProSafe 7000 Managed Switch Release 8.0.3
IP Source Guard
IP Source Guard uses the DHCP snooping bindings database. When IP Source Guard is
enabled, the switch drops incoming packets that do not match a binding in the bindings
database. IP Source Guard can be configured to enforce just the source IP address or both
the source IP address and source MAC address.
enabled, the switch drops incoming packets that do not match a binding in the bindings
database. IP Source Guard can be configured to enforce just the source IP address or both
the source IP address and source MAC address.
Static client
IP address: 192.168.10.1
HW address: 00:11:85:EE:54:E9
IP address: 192.168.10.1
HW address: 00:11:85:EE:54:E9
Interface
GSM73xxS
Interface
1/0/1
1/0/1
Interface
DHCP Server
IP address: 192.168.10.1
IP address: 192.168.10.1
DHCP Client
IP address: 192.168.10.86 (obtained)
HW address: 00:16:76:A7:88:CC
IP address: 192.168.10.86 (obtained)
HW address: 00:16:76:A7:88:CC
1/0/3
1/0/2
Figure 31. IP Source Guard
The example is shown as CLI commands and as a Web interface procedure.
CLI: Configure Dynamic ARP Inspection
1.
Enable DHCP snooping globally.
(Netgear Switch) (Config)# ip dhcp snooping