Home » Dell Manuals » Hubs & Switches » Dell PowerConnect 8024 » Manual Viewer

Dell PowerConnect 8024 User's Guide - Page 429

DHCP Snooping, Forwarded, Dropped

View all Dell PowerConnect 8024 manuals

Add to My Manuals
Save this manual to your list of manuals

Page 429 highlights

• Forwarded - The number of valid ARP packets forwarded by DAI. • Dropped - The number of not valid ARP packets dropped by DAI. Viewing Dynamic ARP Inspection Statistics With CLI Commands For information about the CLI commands that perform this function, refer to the following chapter in the CLI Reference Guide: • Dynamic ARP Inspection Commands The following table summarizes the equivalent CLI commands for this feature. Table 7-63. Dynamic ARP Inspection Command CLI Command show ip arp inspection statistics clear counters ip arp inspection Description Displays the statistics of the ARP packets processed by Dynamic ARP Inspection. Resets the statistics for Dynamic ARP Inspection on all VLANs. DHCP Snooping DHCP snooping is a security feature that monitors DHCP messages between a DHCP client and DHCP servers to filter harmful DHCP messages and to build a bindings database of MAC address, IP address, VLAN ID, and port tuples that are considered authorized. You can enable DHCP snooping globally, perinterface, and on specific VLANs, and configure ports within the VLAN to be trusted or untrusted. DHCP servers must be reached through trusted ports. DHCP snooping enforces the following security rules: • DHCP packets from a DHCP server (DHCPOFFER, DHCPACK, DHCPNAK, DHCPRELEASEQUERY) are dropped if received on an untrusted port. • DHCPRELEASE and DHCPDECLINE messages are dropped if for a MAC address in the snooping database, but the binding's interface is other than the interface where the message was received. • On untrusted interfaces, the switch drops DHCP packets whose source MAC address does not match the client hardware address. This feature is a configurable option. The hardware identifies all incoming DHCP packets on ports where DHCP snooping is enabled. DHCP snooping is enabled on a port if (a) DHCP snooping is enabled globally, and (b) the port is a member of a VLAN where DHCP snooping is enabled. On untrusted ports, the hardware traps all incoming DHCP packets to the CPU. On trusted ports, the hardware forwards client messages and copies server messages to the CPU so that DHCP snooping can learn the binding. Configuring Switching Information 429

Section	Page
Introduction	19
System Features	20
Switching Features	22
Port-Based Features	24
Virtual Local Area Network Supported Features	25
Spanning Tree Protocol Features	27
Link Aggregation Features	28
IP Phone and Access Point Support Features	28
Routing Features	29
MAC Address Supported Features	30
IPv4 Routing Features	31
IPv6 Routing Features	32
IPv6	32
OSPFv3	33
Quality of Service Features	33
Multicast Features	34
IPv4 Multicast Features	34
IPv6 Multicast Features	35
Security Features	35
Command-Line Interface Documentation	36
Using Dell™ OpenManage™ Switch Administrator	37
Setting the IP Address of the Switch	38
Setting DHCP on the OOB Interface	38
Setting DHCP on the Management Interface	38
Setting a Static Address on the OOB Interface	38
Setting a Static Address on the Management Interface	39
Starting the Application	40
Understanding the Interface	40
Using the Switch Administrator Buttons	42
Information Buttons	42
Device Management Buttons	42
Check Boxes	43
Defining Fields	43
Accessing the Switch Through the CLI	43
Console Connection	44
Telnet Connection	44
Using the CLI	44
Command Mode Overview	44
User EXEC Mode	45
Privileged EXEC Mode	45
Global Configuration Mode	46
Interface Configuration Mode	46
Cable and Port Information	47
Overview	47
Ethernet Interface	48
Out of Band (OOB) Interface	48
Serial Cable Connection	48
Connecting the Switch to a Terminal	48
Power Connection	48
Hardware Description	51
Overview	51
Ports	52
PowerConnect 8024 Front Panel	52
PowerConnect 8024F Front Panel	53
PowerConnect 8024/8024F Rear Panel	54
SFP/SFP+ Transceivers	54
Physical Dimensions	54
Power Supplies	55
Ventilation System	55
PowerConnect 8024/8024F LED Definitions	55
100/1000/10000 Base-T Port LEDs	55
System LEDs	56
SFP/SFP+ Port LEDs	56
Configuring Dell™ PowerConnect™	57
Overview	57
Starting the CLI	58
General Configuration Information	60
Terminal Connection Configuration	60
Baud Rate	60
Other Configuration Requirements	60
Booting the Switch	61
Configuration Overview	67
Easy Setup Wizard	67
Advanced Configuration	73
CLI Basics	73
PowerConnect 8024 and 8024F CLI Reference Guide	74
Security Management and Password Configuration	77
Software Download and Reboot	80
Software Download Through XModem	80
Software Download Through TFTP Server	80
Update Bootcode	83
Boot Menu Functions	83
Start Operational Code	84
Change the Baud Rate	84
Retrieve Event Log using XMODEM	85
Load New Operational Code Using XMODEM	85
Display Operational Code Vital Product Data	86
Abort Boot Code Update	87
Update Boot Code	87
Delete Backup Image	88
Reset the System	88
Restore Configuration to Factory Defaults	89
Activate Backup Image	89
Password Recovery Procedure	89
Reformat and Restore File System	89
Sample Configuration Process	91
Switch Setup Requirements	91
Initial Connection	91
Device Default Settings	97
Enabling Remote Management	97
Configuring Secure Management Access (HTTPS)	100
Configuring System Information	101
Overview	101
Defining General Device Information	102
Asset	102
System Health	104
Versions	106
System Resources	107
Time Zone Configuration	108
Summer Time Configuration	109
Clock Detail	111
Reset	112
Configuring SNTP Settings	114
SNTP Global Settings	115
SNTP Authentication	116
SNTP Server	119
Managing Logs	122
Global Settings	123
RAM Log Table	125
Log File	126
Remote Log Server Settings	127
Defining IP Addressing	130
Out of Band Interface	131
Domain Name Server (DNS)	132
Default Domain Name	133
Host Name Mapping	134
Dynamic Host Name Mapping	136
ARP Table	137
IPv6 Management Features	138
Running Cable Diagnostics	140
Integrated Cable Test for Copper Cables	140
Optical Transceiver Diagnostics	141
Managing Device Security	144
Access Profile	144
Authentication Profiles	149
Select Authentication	153
Password Management	156
Local User Database	158
Line Passwords	161
Enable Password	162
TACACS+ Settings	163
RADIUS Global Configuration	167
RADIUS Server Configuration	169
RADIUS Accounting Server Configuration	172
RADIUS Accounting Server Statistics	175
RADIUS Server Statistics	176
Authorization Network RADIUS	179
Telnet Server	180
Denial of Service	181
Captive Portal	184
CP Global Configuration	184
CP Configuration	186
CP Web Customization	188
Local User	191
User Group	193
Interface Association	195
CP Status	196
CP Activation and Activity Status	198
Interface Activation Status	199
Interface Capability Status	200
Client Summary	201
Client Detail	202
CP Interface Client Status	203
CP Client Status	203
Defining SNMP Parameters	206
SNMP v1 and v2	206
SNMP v3	206
SNMP Global Parameters	206
SNMP View Settings	208
Access Control Group	211
SNMPv3 User Security Model (USM)	213
Communities	217
Notification Filter	220
Notification Recipients	222
File Management	226
File System	226
Active Images	227
File Download	228
File Upload	231
Copy Files	232
Defining Advanced Settings	234
Auto Configuration	234
Trap Manager	236
Trap Flags	237
OSPFv2 Trap Flags	238
OSPFv3 Trap Flags	241
Trap Log	244
sFlow	245
sFlow Agent Summary	246
sFlow Receiver Configuration	247
sFlow Sampler Configuration	249
sFlow Poll Configuration	251
Industry Standard Discovery Protocol	253
ISDP Global Configuration	253
Cache Table	255
Interface Configuration	257
ISDP Statistics	258
iSCSI Optimizations	260
iSCSI Optimization Global Configuration	261
iSCSI Targets	262
iSCSI Sessions	263
Configuring Switching Information	267
Overview	267
Configuring Network Security	268
Dot1x Authentication	268
Authenticated Users	274
Port Security	275
IP ACL Configuration	278
IP ACL Rule Configuration	280
MAC ACL Configuration	284
MAC ACL Rule Configuration	286
IPv6 Access Control Lists	289
IPv6 ACL Rule Configuration	292
ACL Bind Configuration	294
Configuring Ports	297
Global Parameters	297
Port Configuration	299
Protected Port Configuration	302
LAG Configuration	304
Storm Control	307
Configuring Traffic Mirroring	310
Port Mirroring	310
Flow Based Mirroring	312
Configuring Address Tables	314
Static Address Table	314
Dynamic Address Table	317
Configuring GARP	319
GARP Timers	320
Configuring the Spanning Tree Protocol	323
STP Global Settings	323
STP Port Settings	327
STP LAG Settings	329
Rapid Spanning Tree	332
MSTP Settings	333
MSTP Interface Settings	336
Configuring VLANs	339
VLAN Membership	339
Double VLAN	343
VLAN Port Settings	347
VLAN LAG Settings	349
Bind MAC to VLAN	351
Bind IP Subnet to VLAN	354
Protocol Group	356
GVRP Parameters	359
Configuring Voice VLAN	363
Aggregating Ports	365
LACP Parameters	365
LAG Membership	367
Assigning Ports to LAGs and LACPs Using CLI Commands	369
LAG Hash Configuration	369
LAG Hash Summary	370
Managing Multicast Support	372
Multicast Global Parameters	372
Bridge Multicast Group	373
Bridge Multicast Forward	377
IGMP Snooping	378
General IGMP Snooping	379
Global Querier Configuration	383
VLAN Querier	384
VLAN Querier Status	386
MFDB IGMP Snooping Table	387
MRouter Status	389
MLD Snooping	390
MLD Snooping General	390
MLD Snooping Global Querier Configuration	392
MLD Snooping VLAN Querier	394
FMLD Snooping VLAN Querier Status	396
MFDB MLD Snooping Table	397
Configuring the Link Layer Discovery Protocol (LLDP)	399
LLDP Configuration	399
LLDP Statistics	402
LLDP Connections	405
Configuring Link Layer Discovery Protocol (LLDP) for Media Endpoint Devices	407
LLDP-MED Global Configuration	407
LLDP-MED Interface Configuration	409
LLDP-MED Local Device Information	411
LLDP-MED Remote Device Information	414
Creating Link Dependencies	417
Link Dependency Summary	417
Dynamic ARP Inspection	420
DAI Global Configuration	420
DAI Interface Configuration	422
DAI VLAN Configuration	423
DAI ACL Configuration	424
DAI ACL Rule Configuration	426
DAI Statistics	427
DHCP Snooping	429
DHCP Snooping Configuration	430
DHCP Snooping Interface Configuration	431
DHCP Snooping VLAN Configuration	434
DHCP Snooping Persistent Configuration	436
DHCP Snooping Static Bindings Configuration	437
DHCP Snooping Dynamic Bindings Summary	440
DHCP Snooping Statistics	442
DHCP Relay	443
DHCP Relay Global Configuration	444
DHCP Relay Interface Configuration	445
DHCP Relay Interface Statistics	446
DHCP Relay VLAN Configuration	448
Priority-based Flow Control (PFC)	451
PFC Overview	451
PFC Configuration	451
PFC Statistics	452
Viewing Statistics and Remote Monitoring	455
Overview	455
Table Views	456
Interface Statistics	456
Etherlike Statistics	458
GVRP Statistics	459
EAP Statistics	462
Utilization Summary	463
Counter Summary	465
RMON	466
RMON Statistics	467
RMON History Control Statistics	469
RMON History Table	471
RMON Event Control	473
RMON Event Log	475
RMON Alarms	476
Charts	481
Ports Statistics	481
LAG Statistics	482
Configuring Routing	485
Overview	485
ARP	486
ARP Create	486
ARP Table Configuration	488
IP	491
IP Configuration	491
IP Statistics	492
IP Interface Configuration	496
OSPF	499
OSPF Configuration	499
Area Configuration	504
Stub Area Summary	508
Area Range Configuration	509
Interface Statistics	511
Interface Configuration	514
Neighbor Table	519
Neighbor Configuration	520
Link State Database	523
Virtual Link Configuration	525
Virtual Link Summary	531
Route Redistribution Configuration	532
Route Redistribution Summary	535
BOOTP/DHCP Relay Agent	536
BOOTP/DHCP Relay Agent Configuration	536
IP Helper	538
IP Helper Global Configuration	538
IP Helper Interface Configuration	541
IP Helper Statistics	543
RIP	545
RIP Configuration	545
RIP Interface Configuration	548
RIP Interface Summary	550
RIP Route Redistribution Configuration	552
RIP Route Redistribution Summary	555
Router Discovery	556
Router Discovery Configuration	556
Router Discovery Status	558
Router	560
Route Table	560
Best Routes Table	561
Route Entry Configuration	563
Configured Routes	565
Route Preferences Configuration	567
VLAN Routing	569
VLAN Routing Summary	569
VRRP	571
VRRP Configuration	572
VRRP Router Configuration	573
VRRP Virtual Router Status	578
VRRP Virtual Router Statistics	581
Tunnels	583
Tunnels Configuration	584
Tunnels Summary	586
Loopbacks	588
Loopbacks Configuration	588
Loopbacks Summary	593
Configuring IPv6	595
Overview	595
Global Configuration	596
Interface Configuration	598
Interface Summary	602
IPv6 Statistics	603
IPv6 Neighbor Table	608
DHCPv6	610
DHCPv6 Global Configuration	610
DHCPv6 Pool Configuration	612
Prefix Delegation Configuration	614
DHCPv6 Pool Summary	616
DHCPv6 Interface Configuration	617
DHCPv6 Server Bindings Summary	621
DHCPv6 Statistics	622
OSPFv3	624
OSPFv3 Configuration	625
OSPFv3 Area Configuration	628
OSPFv3 Stub Area Summary	633
OSPFv3 Area Range Configuration	634
OSPFv3 Interface Configuration	636
OSPFv3 Interface Statistics	639
OSPFv3 Neighbors	642
OSPFv3 Neighbor Table	645
OSPFv3 Link State Database	646
OSPFv3 Virtual Link Configuration	648
OSPFv3 Virtual Link Summary	651
OSPFv3 Route Redistribution Configuration	653
OSPFv3 Route Redistribution Summary	655
IPv6 Routes	658
IPv6 Route Entry Configuration	658
IPv6 Route Table	659
IPv6 Route Preferences	661
Configured IPv6 Routes	663
Configuring Quality of Service	665
Overview	665
Differentiated Services	666
DiffServ Overview	666
Defining DiffServ	666
Diffserv Configuration	667
Class Configuration	668
Class Criteria	670
Policy Configuration	675
Policy Class Definition	678
Service Configuration	684
Service Detailed Statistics	685
Class of Service	687
Mapping Table Configuration	687
Interface Configuration	691
Interface Queue Configuration	693
Auto VoIP	696
Auto VoIP Global Configuration	696
Auto VoIP Interface Configuration	697
Configuring IP Multicast	701
Overview	701
Multicast	702
Multicast Global Configuration	702
Multicast Interface Configuration	705
Multicast Route Table	706
Multicast Admin Boundary Configuration	707
Multicast Admin Boundary Summary	709
Multicast Static MRoute Configuration	709
Multicast Static MRoute Summary	711
Distance Vector Multicast Routing Protocol	713
DVMRP Global Configuration	713
DVMRP Interface Configuration	714
DVMRP Configuration Summary	716
Next Hop Summary	718
Prune Summary	719
Route Summary	720
Internet Group Management Protocol	723
IGMP Global Configuration	723
Routing Interface	724
Proxy Interface	732
Multicast Listener Discovery	740
MLD Global Configuration	740
MLD Routing Interface Configuration	741
MLD Routing Interface Summary	742
MLD Routing Interface Cache Information	745
MLD Routing Interface Source List Information	746
MLD Traffic	747
MLD Proxy Configuration	749
MLD Proxy Configuration Summary	750
Interface Membership Information	752
Interface Membership Information—Detailed	754
Protocol Independent Multicast	755
PIM Global Configuration	756
PIM Global Status	758
PIM Interface Configuration	759
Interface Summary	760
Candidate RP Configuration	762
Static RP Configuration	764
SSM Range Configuration	766
BSR Candidate Configuration	768
BSR Candidate Summary	770
Getting Help	773
Obtaining Assistance	774
Online Services	774
Automated Order-Status Service	775
Support Service	775
Dell Enterprise Training and Certification	775
Problems With Your Order	775
Product Information	776
Returning Items for Warranty Repair or Credit	776
Before You Call	776

Match case Limit results 1 per page

Configuring Switching Information

429

•

Forwarded

— The number of valid ARP packets forwarded by DAI.

•

Dropped

— The number of not valid ARP packets dropped by DAI.

Viewing Dynamic ARP Inspection Statistics With CLI Commands

For information about the CLI commands that perform this function, refer to the following chapter in

the

CLI Reference Guide

•

Dynamic ARP Inspection Commands

The following table summarizes the equivalent CLI commands for this feature.

DHCP Snooping

DHCP snooping is a security feature that monitors DHCP messages between a DHCP client and DHCP

servers to filter harmful DHCP messages and to build a bindings database of MAC address, IP address,

VLAN ID, and port tuples that are considered authorized. You can enable DHCP snooping globally, per-

interface, and on specific VLANs, and configure ports within the VLAN to be trusted or untrusted.

DHCP servers must be reached through trusted ports.

DHCP snooping enforces the following security rules:

•

DHCP packets from a DHCP server (DHCPOFFER, DHCPACK, DHCPNAK,

DHCPRELEASEQUERY) are dropped if received on an untrusted port.

•

DHCPRELEASE and DHCPDECLINE messages are dropped if for a MAC address in the snooping

database, but the binding’s interface is other than the interface where the message was received.

•

On untrusted interfaces, the switch drops DHCP packets whose source MAC address does not match

the client hardware address. This feature is a configurable option.

The hardware identifies all incoming DHCP packets on ports where DHCP snooping is enabled. DHCP

snooping is enabled on a port if (a) DHCP snooping is enabled globally, and (b) the port is a member of

a VLAN where DHCP snooping is enabled. On untrusted ports, the hardware traps all incoming DHCP

packets to the CPU. On trusted ports, the hardware forwards client messages and copies server messages

to the CPU so that DHCP snooping can learn the binding.

Table 7-63.

Dynamic ARP Inspection Command

CLI Command

Description

show ip arp inspection statistics

Displays the statistics of the ARP packets processed by Dynamic ARP

Inspection.

clear counters ip arp inspection

Resets the statistics for Dynamic ARP Inspection on all VLANs.