Home » Netgear Manuals » Hubs & Switches » Netgear GSM7328SNA » Manual Viewer

Netgear GSM7328SNA 7000 Series Managed Switch Administration Guide for Softwar - Page 268

IP Source Guard, CLI: Con Dynamic ARP Inspection

UPC - 606449042979

Add to My Manuals
Save this manual to your list of manuals

Page 268 highlights

ProSafe 7000 Managed Switch Release 8.0.3 IP Source Guard IP Source Guard uses the DHCP snooping bindings database. When IP Source Guard is enabled, the switch drops incoming packets that do not match a binding in the bindings database. IP Source Guard can be configured to enforce just the source IP address or both the source IP address and source MAC address. Static client IP address: 192.168.10.1 HW address: 00:11:85:EE:54:E9 Interface 1/0/1 Interface 1/0/2 GSM73xxS Interface 1/0/3 DHCP Server IP address: 192.168.10.1 Figure 31. IP Source Guard DHCP Client IP address: 192.168.10.86 (obtained) HW address: 00:16:76:A7:88:CC The example is shown as CLI commands and as a Web interface procedure. CLI: Configure Dynamic ARP Inspection 1. Enable DHCP snooping globally. (Netgear Switch) (Config)# ip dhcp snooping 268 | Chapter 14. Security Management

Section	Page
ProSafe 7000 Managed Switch Release 8.0.3	1
Table of Contents	3
1. Documentation Resources	8
2. VLANs	9
Create Two VLANs	10
CLI: Create Two VLANS	10
Web Interface: Create Two VLANS	10
Assign Ports to VLAN2	12
CLI: Assign Ports to VLAN2	12
Web Interface: Assign Ports to VLAN2	12
Assign Ports to VLAN3	13
CLI: Assign Ports to VLAN3	13
Web Interface: Assign Ports to VLAN3	14
Assign VLAN3 as the Default VLAN for Port 1/0/2	15
CLI: Assign VLAN3 as the Default VLAN for Port 1/0/2	15
Web Interface: Assign VLAN3 as the Default VLAN for Port 1/0/2	15
Create a MAC-Based VLAN	16
CLI: Create a MAC-Based VLAN	16
Web Interface: Assign a MAC-Based VLAN	17
Create a Protocol-Based VLAN	19
CLI: Create a Protocol-Based VLAN	19
Web Interface: Create a Protocol-Based VLAN	20
Virtual VLANs: Create an IP Subnet–Based VLAN	21
CLI: Create an IP Subnet–Based VLAN	22
Web Interface: Create an IP Subnet–Based VLAN	23
Voice VLANs	24
CLI: Configure Voice VLAN and Prioritize Voice Traffic	25
Web Interface: Configure Voice VLAN and Prioritize Voice Traffic	27
3. LAG s	34
Create Two LAGs	35
CLI: Create Two LAGs	35
Web Interface: Create Two LAGs	35
Add Ports to LAGs	36
CLI: Add Ports to the LAGs	36
Web Interface: Add Ports to LAGs	37
Enable Both LAGs	38
CLI: Enable Both LAGs	38
Web Interface: Enable Both LAGs	38
4. Port Routing	39
Port Routing Configuration	40
Enable Routing for the Switch	41
CLI: Enable Routing for the Switch	41
Web Interface: Enable Routing for the Switch	41
Enable Routing for Ports on the Switch	41
CLI: Enable Routing for Ports on the Switch	42
Web Interface: Enable Routing for Ports on the Switch	42
Add a Default Route	44
CLI: Add a Default Route	44
Web Interface: Add a Default Route	44
Add a Static Route	45
CLI: Add a Static Route	45
Web Interface: Add a Static Route	46
5. VLAN Routing	47
Create Two VLANs	47
CLI: Create Two VLANs	48
Web Interface: Create Two VLANs	49
Set Up VLAN Routing for the VLANs and the Switch	52
CLI: Set Up VLAN Routing for the VLANs and the Switch	52
Web Interface: Set Up VLAN Routing for the VLANs and the Switch	53
6. RIP	54
Routing for the Switch	55
CLI: Enable Routing for the Switch	55
Web Interface: Enable Routing for the Switch	55
Routing for Ports	56
CLI: Enable Routing and Assigning IP Addresses for Ports 1/0/2 and 1/0/3	56
Web Interface: Enable Routing for the Ports	56
RIP for the Switch	57
CLI: Enable RIP on the Switch	57
Web Interface: Enableg RIP on the Switch	58
RIP for Ports 1/0/2 and 1/0/3	58
CLI: Enable RIP for Ports 1/0/2 and 1/0/3	58
Web Interface: Enable RIP for Ports 1/0/2 and 1/0/3	59
VLAN Routing with RIP	60
CLI: Configure VLAN Routing with RIP Support	60
Web Interface: Configure VLAN Routing with RIP Support	62
7. OSPF	64
Inter-area Router	65
CLI: Configure an Inter-area Router	65
Web Interface: Configure an Inter-area Router	67
OSPF on a Border Router	70
CLI: Configure OSPF on a Border Router	70
Web Interface: Configure OSPF on a Border Router	71
Stub Areas	75
CLI: Configure Area 1 as a Stub Area on A1	76
Web Interface: Configure Area 1 as a Stub Area on A1	77
CLI: Configure Area 1 as a Stub Area on A2	80
Web Interface: Configure Area 1 as a Stub Area on A2	81
nssa Areas	84
CLI: Configure Area 1 as an nssa Area	84
Web Interface: Configure Area 1 as an nssa Area on A1	85
CLI: Configure Area 1 as an nssa Area on A2	88
Web Interface: Configure Area 1 as an nssa Area on A2	90
VLAN Routing OSPF	93
CLI: Configure VLAN Routing OSPF	94
Web Interface: Configure VLAN Routing OSPF	95
OSPFv3	98
CLI: Configure OSPFv3	98
Web Interface: Configure OSPFv3	100
8. ARP	103
Proxy ARP Examples	103
CLI: show ip interface	103
CLI: ip proxy-arp	104
Web Interface: Configure Proxy ARP on a Port	104
9. VRRP	105
VRRP on a Master Router	106
CLI: Configure VRRP on a Master Router	106
Web Interface: Configure VRRP on a Master Router	107
VRRP on a Backup Router	108
CLI: Configure VRRP on a Backup Router	108
Web Interface: Configure VRRP on a Backup Router	109
10. ACLs	111
MAC ACLs	112
IP ACLs	112
ACL Configuration	112
Set Up an IP ACL with Two Rules	113
CLI: Set Up an IP ACL with Two Rules	113
Web Interface: Set Up an IP ACL with Two Rules	114
One-Way Access Using a TCP Flag in an ACL	117
CLI:Configure One-Way Access Using a TCP Flag in an ACL	117
Web Interface: Configure One-Way Access Using a TCP Flag in an ACL	121
Use ACLs to Configure Isolated VLANs on a Layer 3 Switch	132
CLI: Configure One-Way Access Using a TCP Flag in ACL Commands	133
Web Interface: Configure One-Way Access Using a TCP Flag in an ACL	135
Set up a MAC ACL with Two Rules	144
CLI: Set up a MAC ACL with Two Rules	144
Web Interface: Set up a MAC ACL with Two Rules	145
ACL Mirroring	147
CLI: Configure ACL Mirroring	147
Web Interface: Configure ACL Mirroring	148
ACL Redirect	152
CLI: Redirect a Traffic Stream	152
Web Interface: Redirect a Traffic Stream	153
Configure IPv6 ACLs	157
CLI: Configure an IPv6 ACL	158
Web Interface: Configure an IPv6 ACL	160
11. CoS Queuing	164
CoS Queue Mapping	165
Trusted Ports	165
Untrusted Ports	165
CoS Queue Configuration	166
Show classofservice Trust	166
CLI: Show classofservice Trust	166
Web Interface: Show classofservice Trust	167
Set classofservice Trust Mode	167
CLI: Set classofservice Trust Mode	167
Web Interface: Set classofservice Trust Mode	167
Show classofservice IP-Precedence Mapping	168
CLI: Show classofservice IP-Precedence Mapping	168
Web Interface: Show classofservice ip-precedence Mapping	168
Configure Cos-queue Min-bandwidth and Strict Priority Scheduler Mode	169
CLI: Configure Cos-queue Min-bandwidth and Strict Priority Scheduler Mode	169
Web Interface: Configure CoS-queue Min-bandwidth and Strict Priority Scheduler Mode	169
Set CoS Trust Mode for an Interface	170
CLI: Set CoS Trust Mode for an Interface	171
Web Interface: Set CoS Trust Mode for an Interface	171
Configure Traffic Shaping	171
CLI: Configure traffic-shape	172
Web Interface: Configure Traffic Shaping	172
12. DiffServ	173
DiffServ	174
CLI: Configure DiffServ	175
Web Interface: Configure DiffServ	177
DiffServ for VoIP	190
CLI: Configure DiffServ for VoIP	190
Web Interface: Diffserv for VoIP	192
Auto VoIP	197
CLI: Configure Auto VoIP	198
Web Interface: Configure Auto-VoIP	200
DiffServ for IPv6	201
CLI: Configure DiffServ for IPv6	201
Web Interface: Configure DiffServ for IPv6	202
Color Conform Policy	208
CLI: Configure a Color Conform Policy	208
Web Interface: Configure a Color Conform Policy	209
13. IGMP Snooping and Querier	216
IGMP Snooping	216
CLI: Enable IGMP Snooping	216
Web Interface: Enable IGMP Snooping	217
Show igmpsnooping	217
CLI: Show igmpsnooping	217
Web Interface: Show igmpsnooping	218
Show mac-address-table igmpsnooping	218
CLI: Show mac-address-table igmpsnooping	218
Web Interface: Show mac-address-table igmpsnooping	219
External Multicast Router	219
CLI: Configure the Switch with an External Multicast Router	219
Web Interface: Configure the Switch with an External Multicast Router	220
Multicast Router Using VLAN	220
CLI: Configure the Switch with a Multicast Router Using VLAN	220
Web Interface: Configure the Switch with a Multicast Router Using VLAN	221
IGMP Querier	221
Enable IGMP Querier	222
CLI: Enable IGMP Querier	222
Web Interface: Enable IGMP Querier	223
Show IGMP Querier Status	225
CLI: Show IGMP Querier Status	225
Web Interface: Show IGMP Querier Status	225
14. Security Management	226
Port Security	226
Set the Dynamic and Static Limit on Port 1/0/1	227
CLI: Set the Dynamic and Static Limit on Port 1/0/1	227
Web Interface: Set the Dynamic and Static Limit on Port 1/0/1	228
Convert the Dynamic Address Learned from 1/0/1 to a Static Address	229
CLI: Convert the Dynamic Address Learned from 1/0/1 to the Static Address	229
Web Interface: Convert the Dynamic Address Learned from 1/0/1 to the Static Address	229
Create a Static Address	230
CLI: Create a Static Address	230
Web Interface: Create a Static Address	230
Protected Ports	230
CLI: Configure a Protected Port to Isolate Ports on the Switch	231
Web Interface: Configure a Protected Port to Isolate Ports on the Switch	233
802.1x Port Security	237
CLI: Authenticating dot1x Users by a RADIUS Server	237
Web Interface: Authenticating dot1x Users by a RADIUS Server	238
Create a Guest VLAN	243
CLI: Create a Guest VLAN	244
Web Interface: Create a Guest VLAN	245
Assign VLANs Using RADIUS	248
CLI: Assign VLANS Using RADIUS	249
Web Interface: Assign VLANS Using RADIUS	251
Dynamic ARP Inspection	254
CLI: Configure Dynamic ARP Inspection	255
Web Interface: Configure Dynamic ARP Inspection	256
Static Mapping	260
CLI: Configure Static Mapping	260
Web Interface: Configure Static Mapping	261
DHCP Snooping	262
CLI: Configure DHCP Snooping	262
Web Interface: Configure DHCP Snooping	263
Enter Static Binding into the Binding Database	265
CLI: Enter Static Binding into the Binding Database	265
Web Interface: Enter Static Binding into the Binding Database	266
Maximum Rate of DHCP Messages	266
CLI: Configure the Maximum Rate of DHCP Messages	267
Web Interface: Configure the Maximum Rate of DHCP Messages	267
IP Source Guard	268
CLI: Configure Dynamic ARP Inspection	268
Web Interface: Configure Dynamic ARP Inspection	269
15. SNTP	273
Show SNTP (CLI Only)	273
show sntp	273
show sntp client	274
show sntp server	274
Configure SNTP	275
CLI: Configure SNTP	275
Web Interface: Configure SNTP	276
Set the Time Zone (CLI Only)	277
Set the Named SNTP Server	277
CLI: Set the Named SNTP Server	278
Web Interface: Set the Named SNTP Server	278
16. Tools	280
Traceroute	280
CLI: Traceroute	281
Web Interface: Traceroute	282
Configuration Scripting	282
script	283
script list and script delete	283
script apply running-config.scr	284
Create a Configuration Script	284
Upload a Configuration Script	284
Pre-Login Banner	285
Create a Pre-Login Banner (CLI Only)	285
Port Mirroring	286
CLI: Specify the Source (Mirrored) Ports and Destination (Probe)	286
Web Interface: Specify the Source (Mirrored) Ports and Destination (Probe)	287
Dual Image	287
CLI: Download a Backup Image and Make It Active	288
Web Interface: Download a Backup Image and Make It Active	289
Outbound Telnet	290
CLI: show network	291
CLI: show telnet	291
CLI: transport output telnet	292
Web Interface: Configure Telnet	292
CLI: Configure the session-limit and session-timeout	293
Web Interface: Configure the Session Timeout	293
17. Syslog	294
Show Logging	295
CLI: Show Logging	295
Web Interface: Show Logging	295
Show Logging Buffered	297
CLI: Show Logging Buffered	297
Web Interface: Show Logging Buffered	298
Show Logging Traplogs	298
CLI: Show Logging Traplogs	298
Web Interface: Show Logging Trap Logs	298
Show Logging Hosts	299
CLI: Show Logging Hosts	299
Web Interface: Show Logging Hosts	300
Configure Logging for a Port	300
CLI: Configure Logging for the Port	300
Web Interface: Configure Logging for the Port	301
18. Switch Stacks	302
Switch Stack Management and Connectivity	302
The Stack Master and Stack Members	303
Stack Master	303
Stack Members	304
Stack Member Numbers	304
Stack Member Priority Values	305
Install and Power-up a Stack	305
Compatible Switch Models	305
Install a Switch Stack	306
Switch Firmware	306
Code Mismatch	307
Upgrade the Firmware	307
Migrate Configuration with a Firmware Upgrade	307
Copy Master Firmware to a Stack Member (Web Interface)	308
Configure a Stacking Port as an Ethernet Port	308
CLI: Configure a Stacking Port as an Ethernet Port	309
Web Interface: Configure a Stacking Port as an Ethernet Port	310
Stack Switches Using 10G Fiber	311
CLI: Stack Switches Using 10G Fiber	312
Web Interface: Stack Switches Using 10G Fiber	313
Add, Remove, or Replace a Stack Member	314
Add Switches to an Operating Stack	314
Remove a Switch from the Stack	315
Replace a Stack Member	315
Switch Stack Configuration Files	316
Preconfigure a Switch	317
Renumber Stack Members	318
CLI: Renumber Stack Members	318
Web Interface: Renumber Stack Members	319
Move the Stack Master to a Different Unit	320
CLI: Move the Stack Master to a Different Unit	320
Web Interface: Move the Stack Master to a Different Unit	320
19. SNMP	321
Add a New Community	321
CLI: Add a New Community	321
Web Interface: Add a New Community	322
Enable SNMP Trap	322
CLI: Enable SNMP Trap	322
Web Interface: Enable SNMP Trap	323
SNMP V3	323
CLI: Configure SNMP V3	324
Web Interface: Configure SNMP V3	324
sFlow	325
CLI: Configure Statistical Packet-Based Sampling of Packet Flows with sFlow	326
Web Interface: Configure Statistical Packet-based Sampling with sFlow	327
Time-Based Sampling of Counters with sFlow	329
CLI: Configure Time-Based Sampling of Counters with sFlow	329
Web Interface: Configure Time-Based Sampling of Counters with sFlow	329
20. DNS	330
Specify Two DNS Servers	330
CLI: Specify Two DNS Servers	330
Web Interface: Specify Two DNS Servers	331
Manually Add a Host Name and an IP Address	331
CLI: Manually Add a Host Name and an IP Address	331
Web Interface: Manually Add a Host Name and an IP Address	332
21. DHCP Server	333
Configure a DHCP Server in Dynamic Mode	333
CLI: Configure a DHCP Server in Dynamic Mode	333
Web Interface: Configure a DHCP Server in Dynamic Mode	334
Configure a DHCP Reservation	336
CLI: Configure a DHCP Reservation	337
Web Interface: Configure a DHCP Reservation	337
22. Double VLANs and Private VLAN Groups	339
Double VLANs	339
CLI: Enable a Double VLAN	340
Web Interface: Enable a Double VLAN	340
Private VLAN Groups	343
CLI: Create a Private VLAN Group	345
Web Interface: Create a Private VLAN Group	346
23. Spanning Tree Protocol	350
Configure Classic STP (802.1d)	350
CLI: Configure Classic STP (802.1d)	350
Web Interface: Configure Classic STP (802.1d)	351
Configure Rapid STP (802.1w)	352
CLI: Configure Rapid STP (802.1w)	352
Web Interface: Configure Rapid STP (802.1w)	352
Configure Multiple STP (802.1s)	353
CLI: Configure Multiple STP (802.1s)	353
Web Interface: Configure Multiple STP (802.1s)	354
24. Tunnel	356
CLI: Create a Tunnel	357
Configure Switch GSM7328S_1	357
Configure Switch GSM7328S_2	358
Web Interface: Create a Tunnel	359
Configure Switch GSM7328S_1	359
Configure Switch GSM7328S_2	361
25. IPv6 Interface Configuration	364
Create an IPv6 Routing Interface	364
CLI: Create an IPv6 Routing Interface	364
Web Interface: Create an IPv6 Routing Interface	365
Create an IPv6 Network Interface	366
CLI: Configure the IPv6 Network Interface	367
Web Interface: Configure the IPv6 Network Interface	367
Create an IPv6 Routing VLAN	368
CLI: Create an IPv6 Routing VLAN	368
Web Interface: Create an IPv6 VLAN Routing Interface	370
26. PIM	373
PIM-DM	373
CLI: Configure PIM-DM	375
Web Interface: Configure PIM-DM	379
PIM-SM	397
CLI: Configure PIM-SM	398
Web Interface: Configure PIM-SM	402
27. DHCP L2 Relay and L3 Relay	424
DHCP L2 Relay	424
CLI: Enable DHCP L2 Relay	425
Web Interface: Enable DHCP L2 Relay	426
DHCP L3 Relay	430
CLI: Configure a DHCP Server	430
Web Interface: Configure a DHCP Server	431
Confige a DHCP L3 Relay	434
CLI: Configure a DHCP L3 Relay	434
Web Interface: Configure a DHCP L3 Relay	435
28. MLD	438
Configure MLD	439
CLI: Configure MLD	439
Web Interface: Configure MLD	441
MLD Snooping	452
CLI: Configure MLD Snooping	453
Web Interface: Configure MLD Snooping	454
29. DVMRP	457
CLI: Configure DVMRP	458
Web Interface: Configure DVMRP	464
30. Captive Portal	475
Captive Portal Configuration	476
Enable Captive Portal	476
CLI: Enable Captive Portal	476
Web Interface: Enable Captive Portal	477
Client Access, Authentication, and Control	478
Block a Captive Portal Instance	479
CLI: Block a Captive Portal Instance	479
Web Interface: Block a Captive Portal Instance	479
Local Authorization, Create Users and Groups	479
CLI: Create Users and Groups	480
Web Interface: Create Users and Groups	480
Remote Authorization (RADIUS) User Configuration	481
CLI: Configure RADIUS as the Verification Mode	482
Web Interface: Configure RADIUS as the Verification Mode	483
SSL Certificates	483