Linksys SGE2000 Cisco Small Business SFE/SGE2xxx Series Managed Switches Admin - Page 136

Configuring Device Security Defining DHCP Snooping Add Martian Addresses Page 4 The Add Martian Addresses Page contains the following fields: • Supported IP Format - Indicates only Ipv4 is supported. • IP Address - Enter the Martian IP addresses for which DoS attack is enabled. The possible values are: - One of the addresses in the Martian IP address list. - New IP Address - Enter an IP Address that is not on the list. • Mask - Enter the Mask for which DoS attack is enabled. • Prefix Length - Defines the IP route prefix for the destination IP. STEP 4 Define the relevant fields, STEP 5 Click Apply. The Martian Addresses are defined, and the device is updated. Defining DHCP Snooping DHCP Snooping is a DHCP security feature that provides network security by filtering untrusted DHCP messages and by building and maintaining a DHCP snooping binding database, also referred to as a DHCP snooping binding table. DHCP snooping acts like a firewall between untrusted hosts and DHCP servers. DHCP snooping differentiates between untrusted interfaces connected to the end user and trusted interfaces connected to the DHCP server or another switch. The DHCP Snooping Table contains the untrusted interfaces MAC address, IP address, Lease Time, VLAN ID, and interface information. The DHCP Snooping section contains the following topics: Cisco Small Business SFE/SGE Managed Switches Administration Guide 127