Netgear GS728TP100NAS 사용자 설명서
Managing Device Security
421
ProSafe M5300 Switch
Static Binding Configuration
1.
Interface - Selects the interface to add a binding into the IPSG database.
2.
Use MAC Address to specify the MAC address for the binding.
3.
Use VLAN ID to select the VLAN from the list for the binding rule.
4.
Use IP Address to specify valid IP Address for the binding rule.
5.
Click ADD to add IPSG static binding entry into the database.
6.
Click DELETE to delete selected static entries from the database.
The Dynamic Binding Configuration table shows the following information:
Field
Description
Interface
Displays the interface to add a binding into the IPSG database.
MAC Address
Displays the MAC address for the binding entry.
VLAN ID
Displays the VLAN from the list for the binding entry.
IP Address
Displays valid IP Address for the binding entry.
Filter Type
Filter Type using on the interface. one is source IP address filter type, the other is
source IP address and MAC address filter type.
source IP address and MAC address filter type.
Click CLEAR to clear all the dynamic binding entries.
Dynamic ARP Inspection
malicious ARP packets. DAI prevents a class of man-in-the-middle attacks where an
unfriendly station intercepts traffic for other stations by poisoning the ARP caches of its
unsuspecting neighbors. The malicious attacker send ARP requests or responses mapping
another station’s IP address to its own MAC address.
unfriendly station intercepts traffic for other stations by poisoning the ARP caches of its
unsuspecting neighbors. The malicious attacker send ARP requests or responses mapping
another station’s IP address to its own MAC address.
When DAI is enabled, the switch drops ARP packets whose sender MAC address and
sender IP address do not match an entry in the DHCP snooping bindings database. You can
optionally configure additional ARP packet validation. When DAI is enabled on a VLAN, DAI
is enabled on the interfaces (physical ports or LAGs) that are members of that VLAN.
Individual interfaces are configured as trusted or untrusted. The trust configuration for DAI is
independent of the trust configuration for DHCP snooping.
sender IP address do not match an entry in the DHCP snooping bindings database. You can
optionally configure additional ARP packet validation. When DAI is enabled on a VLAN, DAI
is enabled on the interfaces (physical ports or LAGs) that are members of that VLAN.
Individual interfaces are configured as trusted or untrusted. The trust configuration for DAI is
independent of the trust configuration for DHCP snooping.
The Dynamic ARP Inspection (DAI) folder contains links to the following features:
•
•
•
•
•
•