DELL N3000 User Manual

Switch Feature Overview

DHCP Snooping is a security feature that monitors DHCP messages between 

a DHCP client and DHCP server. It filters harmful DHCP messages and 

builds a bindings database of (MAC address, IP address, VLAN ID, port) 

tuples that are specified as authorized. DHCP snooping can be enabled 

globally and on specific VLANs. Ports within the VLAN can be configured to 

be trusted or untrusted. DHCP servers must be reached through trusted ports.
For information about configuring DHCP Snooping, see "Snooping and 

Dynamic ARP Inspection (DAI) is a security feature that rejects invalid and 

malicious ARP packets. The feature prevents a class of man-in-the-middle 

attacks, where an unfriendly station intercepts traffic for other stations by 

poisoning the ARP caches of its unsuspecting neighbors. The malicious 

station sends ARP requests or responses mapping another station's IP address 

to its own MAC address. 
Dynamic ARP Inspection relies on DHCP Snooping.
For information about configuring DAI, see "Snooping and Inspecting Traffic" 

Private VLAN Edge (PVE) ports are a Layer 2 security feature that provides 

port-based security between ports that are members of the same VLAN. It is 

an extension of the common VLAN. Traffic from protected ports is sent only 

to the uplink ports and cannot be sent to other ports within the VLAN.
For information about configuring IPSG, see "Configuring Port-Based Traffic