Home » Netgear Manuals » Hubs & Switches » Netgear M5300-52G3 » Manual Viewer

Netgear M5300-52G3 Web Management User Guide - Page 416

DHCP Snooping Interface Configuration, Security, Control> DHCP, Snooping, Interface Configuration.

Add to My Manuals
Save this manual to your list of manuals

Page 416 highlights

ProSafe M5300 Switch DHCP Snooping Interface Configuration To display the DHCP Snooping Interface Configuration page, click Security  Control> DHCP Snooping  Interface Configuration. To configure interfaces for DHCP snooping: 1. Select the check box associated with each interface to configure. To apply the same settings to all interfaces, select the check box in the header row. 2. If Trust Mode is enabled, DHCP snooping application considers as port trusted. DHCP servers must be reached through trusted ports.The factory default is disabled. If the trust mode is disabled (untrusted), DHCP snooping enforces the following security rules: • DHCP packets from a DHCP server (DHCPOFFER, DHCPACK, DHCPNAK, DHCPRELEASEQUERY) are dropped if they are received on an untrusted port. • DHCPRELEASE and DHCPDECLINE messages are dropped if the MAC addresses in the snooping database, but the binding's interface is other than the interface where the message was received. • On untrusted interfaces, the switch drops DHCP packets with a source MAC address that does not match the client hardware address if MAC Address Validation is globally enabled. 3. If Logging Invalid Packets is enabled, DHCP snooping application logs invalid packets on this interface. The factory default is disabled. 4. Use Rate Limit (pps) to specify rate limit value for DHCP Snooping purpose. If the incoming rate of DHCP packets exceeds the value of this object for consecutively burst interval seconds, the port will be shutdown. If this value is None there is no limit. The factory default is 15pps (packets per second). The range of Rate Limit is (0 to 300). 5. Use Burst Interval (secs) to specify the burst interval value for rate limiting purpose on this interface. If the rate limit is None burst interval has no meaning shows it as N/A. The factory default is 1 second. The range of Burst Interval is 1 to 15). 6. Click APPLY to apply the new configuration and cause the changes to take effect. These changes will not be retained across a power cycle unless a save configuration is performed. 7. Click CANCEL to abandon the changes. Managing Device Security 416

Section	Page
ProSafe M5300 Switch	1
Contents	3
1. Getting Started	9
Switch Management Interface	9
Web Access	9
Understanding the User Interfaces	10
Using the Web Interface	10
Interface Naming Convention	17
2. Configuring System Information	19
Management	19
System Information	20
Switch Statistics	24
System CPU Status	26
Slot Information	27
Loopback Interface	29
Network Interface	30
Time	34
DNS	40
SDM Template Preference	42
License	43
License Key	43
License Features	44
Services	45
DHCP Server	45
DHCP Relay	53
DHCP L2 Relay	54
UDP Relay	57
DHCPv6 Server	59
DHCPv6 Relay	66
Stacking	68
Stack Features	68
Firmware Synchronization and Upgrade	69
Configuration Maintenance	69
Stack Master Election	70
Factory Defaults Reset Behavior	70
Nonstop Forwarding	71
Stack Configuration	72
Stack Port Configuration	74
Stack Port Diagnostics	76
Stack Firmware Synchronization	77
NSF	78
Checkpoint Statistics	80
PoE (M5300-28G-POE+ and M5300-52G-POE+ Only)	82
Basic PoE Configuration	83
PoE Port Configuration	84
SNMP	87
SNMPV1/V2	87
SNMP V3 User Configuration	92
LLDP	93
LLDP	93
LLDP-MED	100
ISDP	109
ISDP Global Configuration	109
Advanced ISDP Configuration	110
Timer Schedule	114
Timer Global Configuration	114
Timer Schedule Configuration	115
3. Configuring Switching Information	119
VLANs	119
Basic	120
Advanced	122
Auto-VoIP Configuration	134
Protocol-Based	134
OUI-Based	136
iSCSI	139
Basic	139
Advanced	141
Spanning Tree Protocol	143
Basic	143
Advanced	145
Multicast	156
MFDB	156
IGMP Snooping	158
MLD Snooping	167
MVR Configuration	173
Basic	173
Advanced	174
Address Table	177
Basic	177
Advanced	179
Ports	181
Port Configuration	181
Port Description	182
Link Aggregation Groups	184
LAG Configuration	184
LAG Membership	186
4. Routing	189
Routing Table	189
Basic	190
Advanced	192
IP	193
Basic	193
Advanced	197
IPv6	201
Basic	201
Advanced	204
VLAN	218
VLAN Routing Wizard	218
VLAN Routing Configuration	219
ARP	220
Basic	221
Advanced	221
RIP	225
Basic	225
Advanced	226
OSPF	232
Basic	232
Advanced	233
OSPFv3	257
Basic	257
Advanced	258
Router Discovery	279
Router Discovery Configuration	279
VRRP	280
Basic	280
Advanced	282
Multicast	286
Mroute Table	287
Multicast Global Configuration	288
Multicast Interface Configuration	289
DVMRP	290
IGMP	296
PIM	304
Static Routes Configuration	311
Admin Boundary Configuration	312
IPv6 Multicast	313
Mroute Table	313
IPv6 PIM	314
MLD	321
Static Routes Configuration	329
5. Configuring Quality of Service	331
Class of Service	331
Basic	332
Advanced	333
Differentiated Services	339
DiffServ Wizard	340
Basic	341
Advanced	343
6. Managing Device Security	355
Management Security Settings	355
Local User	356
Enable Password Configuration	358
Line Password Configuration	358
RADIUS	359
Configuring TACACS+	364
Authentication List Configuration	366
Login Sessions	371
Configuring Management Access	372
HTTP	372
HTTPS	373
SSH	377
Telnet	380
Console Port	381
Denial of Service	382
Access Control	384
Port Authentication	386
Basic	387
Advanced	389
Traffic Control	397
MAC Filter	397
Port Security	399
Private Group	404
Protected Ports Configuration	406
Private VLAN	407
Storm Control	412
Control	414
DHCP Snooping	414
IP Source Guard	419
Dynamic ARP Inspection	421
Captive Portal	426
Configuring Access Control Lists	435
ACL Wizard	435
Basic	437
Advanced	441
7. Monitoring the System	457
Ports	457
Port Statistics	458
Port Detailed Statistics	459
EAP Statistics	466
Cable Test	467
Logs	468
Buffered Logs	469
Command Log Configuration	470
Console Log Configuration	471
SysLog Configuration	471
Trap Logs	472
Event Logs	474
Persistent Logs	476
Port Mirroring	477
Multiple Port Mirroring	477
sFlow	479
Basic	479
Advanced	480
8. Maintenance	483
Save Configuration	483
Save Configuration	483
Auto Install Configuration	484
Reset	485
Device Reboot	485
Factory Default	486
Password Reset	486
Upload File From Switch	487
File Upload	487
HTTP File Upload	488
USB File Upload	489
Download File To Switch	490
File Download	490
HTTP File Download	492
USB File Download	494
File Management	495
Copy	495
Dual Image Configuration	496
Troubleshooting	497
Ping IPv4	497
Ping IPv6	498
Traceroute IPv4	499
Traceroute IPv6	500
9. Help	501
Online Help	501
Support	501
User Guide	502
Registration	503
A. Default Settings	505
B. Configuration Examples	509
Virtual Local Area Networks (VLANs)	509
VLAN Example Configuration	510
Access Control Lists (ACLs)	511
MAC ACL Example Configuration	512
Standard IP ACL Example Configuration	513
Differentiated Services (DiffServ)	514
Class	514
DiffServ Traffic Classes	515
Creating Policies	515
DiffServ Example Configuration	517
802.1X	518
802.1X Example Configuration	520
MSTP	521
MSTP Example Configuration	523
C. Notification of Compliance	525

Match case Limit results 1 per page

Managing Device Security

416

ProSafe M5300 Switch

DHCP Snooping Interface Configuration

To display the DHCP Snooping Interface Configuration page, click

Security



Control> DHCP

Snooping



Interface Configuration.

To configure interfaces for DHCP snooping:

Select the check box associated with each interface to configure. To apply the same

settings to all interfaces, select the check box in the header row.

Trust Mode

is enabled, DHCP snooping application considers as port trusted. DHCP

servers must be reached through trusted ports.The factory default is disabled. If the trust

mode is disabled (untrusted), DHCP snooping enforces the following security rules:

•

DHCP packets from a DHCP server (DHCPOFFER, DHCPACK, DHCPNAK,

DHCPRELEASEQUERY) are dropped if they are received on an untrusted port.

•

DHCPRELEASE and DHCPDECLINE messages are dropped if the MAC addresses

in the snooping database, but the binding's interface is other than the interface where

the message was received.

•

On untrusted interfaces, the switch drops DHCP packets with a source MAC address

that does not match the client hardware address if MAC Address Validation is globally

enabled.

Logging Invalid Packets

is enabled, DHCP snooping application logs invalid packets on

this interface. The factory default is disabled.

Use

Rate Limit (pps)

to specify rate limit value for DHCP Snooping purpose. If the incoming

rate of DHCP packets exceeds the value of this object for consecutively burst interval

seconds, the port will be shutdown. If this value is None there is no limit. The factory default

is 15pps (packets per second). The range of Rate Limit is (0 to 300).

Use

Burst Interval (secs)

to specify the burst interval value for rate limiting purpose on this

interface. If the rate limit is None burst interval has no meaning shows it as N/A. The factory

default is 1 second. The range of Burst Interval is 1 to 15).

Click

APPLY

to apply the new configuration and cause the changes to take effect. These

changes will not be retained across a power cycle unless a save configuration is performed.

Click

CANCEL

to abandon the changes.