D-Link DMS-3130 User Manual - Page 366

DMS-3130 Series Multi-Gigabit L3 Stackable Managed Switch Web UI Reference Guide Parameter Src-MAC Dst-MAC IP Description Select to enable or disable the source MAC option here. This option specifies to check for ARP requests and response packets and the consistency of the source MAC address in the Ethernet header against the sender MAC address in the ARP payload. Select to enable or disable the destination MAC option here. This option specifies to check for ARP response packets and the consistency of the destination MAC address in the Ethernet header against the target MAC address in the ARP payload. Select to enable or disable the IP option here. This option specifies to check the ARP body for invalid and unexpected IP addresses. It also specifies to check the validity of IP address in the ARP payload. The sender IP in both the ARP request and response and target IP in the ARP response are validated. Packets destined for the IP addresses 0.0.0.0, 255.255.255.255, and all IP multicast addresses are dropped. Sender IP addresses are checked in all ARP requests and responses, and target IP addresses are checked only in ARP responses. Click the Apply button to accept the changes made. The fields that can be configured in ARP Inspection VLAN Logging are described below: Parameter ACL Logging DHCP Logging Description After clicking Edit, select a logging option for ACL logging: Deny, Permit, All and None. Select Deny to log denied ARP requests. Select Permit to log permitted requests. Select All to log all request. Select None to disable logging. After clicking Edit, select a logging option for DHCP logging: Deny, Permit, All and None. Select Deny to log denied ARP requests. Select Permit to log permitted requests. Select All to log all request. Select None to disable logging. The fields that can be configured in ARP Inspection Filter are described below: Parameter ARP Access List Name VID List Static ACL Description Enter the ARP access list name used here. This name can be up to 32 characters long. Enter the VLAN ID list used here. Select whether to use a static ACL or not here by either selecting Yes or No. Click the Add button to add a new entry based on the information entered. Click the Delete button to remove an entry based on the information entered. Enter a page number and click the Go button to navigate to a specific page when multiple pages exist. ARP Inspection Port Settings This window is used to display and configure the ARP inspection port settings. To view the following window, click Security > IMPB > IPv4 > Dynamic ARP Inspection > ARP Inspection Port Settings, as shown below: 355