D-Link DES-3552 Product Manual - Page 231

IMPB Entry Settings, Security > IP-MAC-Port Binding IMPB > IMPB Entry Settings

Get D-Link DES-3552 PDF manuals and user guides
UPC - 790069321917
View all D-Link DES-3552 manuals
Add to My Manuals
Save this manual to your list of manuals

Page 231 highlights

xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide From Port / To Port Select a range of ports to set for IP-MAC-port binding. IPv4 State / IPv6 State Use the pull-down menu to enable or disable these ports for IP-MAC-port binding. Enabled (Strict) This mode provides a stricter method of control. If the user selects this mode, all packets will be sent to the CPU, thus all packets will not be forwarded by the hardware until the S/W learns the entries for the ports. The port will check ARP and IP packets by IP-MACport binding entries. When the packet is found by the entry, the MAC address will be set to dynamic state. If the packet is not found by the entry, the packets will be dropped. The default mode is strict if not specified. The ports with strict mode will capture unicast DHCP packets through the ACL module. If configuring IP-MAC-port binding in strict mode when IP-MAC-port binding DHCP snooping is enabled, it will create an ACL profile and the rules according to the ports. If there is not enough profile or rule space for an ACL profile or rule table, it will return a warning message and will not create an ACL profile and rules to capture unicast DHCP packets. Enabled (Loose) This mode provides a looser way of control. If the user selects loose mode, ARP packets will be sent to the CPU. The packets will still be forwarded by the hardware until a specific source MAC address is blocked by the software. The port will check ARP packets by IP-MAC-port binding entries. When the packet is found by the entry, the MAC address will be set to dynamic state. If the packet is not found by the entry, the MAC address will be set to drop. Other packets will be bypassed. Zero IP Use the pull-down menu to enable or disable this feature. Allow zero IP configures the state which allows ARP packets with 0.0.0.0 source IP to bypass. DHCP Packet By default, the DHCP packet with broadcast DA will be flooded. When set to disable, the broadcast DHCP packet received by the specified port will not be forwarded in strict mode. This setting is effective when DHCP snooping is enabled, in the case when a DHCP packet which has been trapped by the CPU needs to be forwarded by the software. This setting controls the forwarding behavior in this situation. Mode Toggle between ARP and ACL. When configuring the port mode to ACL, the Switch will create an ACL access entry corresponding to the entries of this port. If the port changes to ARP, all the ACL access entries will be deleted automatically. The default mode is ARP. Stop Learning Threshold Enter the number of blocked entries on the port. The value is from 0 to 500. Click the Apply button to accept the changes made. IMPB Entry Settings This window is used to create static IP-MAC-binding port entries and view all IMPB entries on the Switch. To view this window, click Security > IP-MAC-Port Binding (IMPB) > IMPB Entry Settings, as shown below: Figure 8-26 IMPB Entry Settings window The fields that can be configured are described below: 222

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118
  • 119
  • 120
  • 121
  • 122
  • 123
  • 124
  • 125
  • 126
  • 127
  • 128
  • 129
  • 130
  • 131
  • 132
  • 133
  • 134
  • 135
  • 136
  • 137
  • 138
  • 139
  • 140
  • 141
  • 142
  • 143
  • 144
  • 145
  • 146
  • 147
  • 148
  • 149
  • 150
  • 151
  • 152
  • 153
  • 154
  • 155
  • 156
  • 157
  • 158
  • 159
  • 160
  • 161
  • 162
  • 163
  • 164
  • 165
  • 166
  • 167
  • 168
  • 169
  • 170
  • 171
  • 172
  • 173
  • 174
  • 175
  • 176
  • 177
  • 178
  • 179
  • 180
  • 181
  • 182
  • 183
  • 184
  • 185
  • 186
  • 187
  • 188
  • 189
  • 190
  • 191
  • 192
  • 193
  • 194
  • 195
  • 196
  • 197
  • 198
  • 199
  • 200
  • 201
  • 202
  • 203
  • 204
  • 205
  • 206
  • 207
  • 208
  • 209
  • 210
  • 211
  • 212
  • 213
  • 214
  • 215
  • 216
  • 217
  • 218
  • 219
  • 220
  • 221
  • 222
  • 223
  • 224
  • 225
  • 226
  • 227
  • 228
  • 229
  • 230
  • 231
  • 232
  • 233
  • 234
  • 235
  • 236
  • 237
  • 238
  • 239
  • 240
  • 241
  • 242
  • 243
  • 244
  • 245
  • 246
  • 247
  • 248
  • 249
  • 250
  • 251
  • 252
  • 253
  • 254
  • 255
  • 256
  • 257
  • 258
  • 259
  • 260
  • 261
  • 262
  • 263
  • 264
  • 265
  • 266
  • 267
  • 268
  • 269
  • 270
  • 271
  • 272
  • 273
  • 274
  • 275
  • 276
  • 277
  • 278
  • 279
  • 280
  • 281
  • 282
  • 283
  • 284
  • 285
  • 286
  • 287
  • 288
  • 289
  • 290
  • 291
  • 292
  • 293
  • 294
  • 295
  • 296
  • 297
  • 298
  • 299
  • 300
  • 301
  • 302
  • 303
  • 304
  • 305
  • 306
  • 307
  • 308
  • 309
  • 310
  • 311
  • 312
  • 313
  • 314
  • 315
  • 316
  • 317
  • 318
  • 319
  • 320
  • 321
  • 322
  • 323
  • 324
  • 325
  • 326
  • 327
  • 328
  • 329
  • 330
  • 331
  • 332
  • 333
  • 334
  • 335
  • 336
  • 337
  • 338
  • 339
  • 340
  • 341
  • 342
  • 343
  • 344
  • 345
  • 346
  • 347
  • 348
  • 349
  • 350
  • 351
  • 352
  • 353
  • 354
  • 355
  • 356
  • 357
  • 358
  • 359
  • 360
  • 361
  • 362
  • 363
  • 364
  • 365
  • 366
  • 367
xStack® DES-3528/DES-3552 Series Layer 2 Stackable Fast Ethernet Managed Switch Web UI Reference Guide
From Port / To Port
Select a range of ports to set for IP-MAC-port binding.
IPv4 State / IPv6 State
Use the pull-down menu to enable or disable these ports for IP-MAC-port binding.
Enabled (Strict)
This mode provides a stricter method of control. If the user selects this mode, all packets
will be sent to the CPU, thus all packets will not be forwarded by the hardware until the
S/W learns the entries for the ports. The port will check ARP and IP packets by IP-MAC-
port binding entries. When the packet is found by the entry, the MAC address will be set
to dynamic state. If the packet is not found by the entry, the packets will be dropped. The
default mode is strict if not specified. The ports with strict mode will capture unicast
DHCP packets through the ACL module. If configuring IP-MAC-port binding in strict
mode when IP-MAC-port binding DHCP snooping is enabled, it will create an ACL profile
and the rules according to the ports. If there is not enough profile or rule space for an
ACL profile or rule table, it will return a warning message and will not create an ACL
profile and rules to capture unicast DHCP packets.
Enabled (Loose)
This mode provides a looser way of control. If the user selects loose mode, ARP packets
will be sent to the CPU. The packets will still be forwarded by the hardware until a
specific source MAC address is blocked by the software. The port will check ARP
packets by IP-MAC-port binding entries. When the packet is found by the entry, the MAC
address will be set to dynamic state. If the packet is not found by the entry, the MAC
address will be set to drop. Other packets will be bypassed.
Zero IP
Use the pull-down menu to enable or disable this feature. Allow zero IP configures the
state which allows ARP packets with 0.0.0.0 source IP to bypass.
DHCP Packet
By default, the DHCP packet with broadcast DA will be flooded. When set to disable, the
broadcast DHCP packet received by the specified port will not be forwarded in strict
mode. This setting is effective when DHCP snooping is enabled, in the case when a
DHCP packet which has been trapped by the CPU needs to be forwarded by the
software. This setting controls the forwarding behavior in this situation.
Mode
Toggle between
ARP
and
ACL
. When configuring the port mode to ACL, the Switch will
create an ACL access entry corresponding to the entries of this port. If the port changes
to ARP, all the ACL access entries will be deleted automatically. The default mode is
ARP
.
Stop Learning
Threshold
Enter the number of blocked entries on the port. The value is from
0
to
500
.
Click the
Apply
button to accept the changes made.
IMPB Entry Settings
This window is used to create static IP-MAC-binding port entries and view all IMPB entries on the Switch.
To view this window, click
Security > IP-MAC-Port Binding (IMPB) > IMPB Entry Settings
, as shown below:
Figure 8-26 IMPB Entry Settings window
The fields that can be configured are described below:
222