Netgear M4100-12GF (GSM7212F) - ProSAFE Gigabit L2+ Managed Switch Guía De Administador
Security Management
256
ProSAFE M4100 Managed Switches
4.
View the DHCP Snooping Binding table.
(GSM7328S) #show ip dhcp snooping binding
Total number of bindings: 1
MAC Address
IP Address
VLAN
Interface Type
Lease (Secs)
----------------- --------------- ---- ----------- ------- -----------
00:16:76:A7:88:CC
192.168.10.86 1
1/0/2
DYNAMIC
86400
If the entry does not exist in the DHCP Snooping Binding table, you can add it statically
through the ip verify binding mac-address vlan vlan id ip address
interface
through the ip verify binding mac-address vlan vlan id ip address
interface
interface id command in global configuration mode.
5.
Enable IP Source Guard in interface 1/0/2.
(GSM7352Sv2) (Interface 1/0/2)#ip verify source port-security
With this configuration, the device verifies both the source IP address and the source MAC
address. If the port-security option is skipped, the device verifies only the source IP address.
address. If the port-security option is skipped, the device verifies only the source IP address.
Web Interface: Configure Dynamic ARP Inspection
1.
Enable DHCP snooping globally.
a. Select Security > Control > DHCP Snooping Global Configuration.
A screen similar to the following displays.
b. For DHCP Snooping Mode, select the Enable radio button.
c. Click Apply.
2.
Enable DHCP snooping in a VLAN.
a. Select Security > Control > DHCP Snooping Global Configuration.