Netgear M5300-52G3 Web Management User Guide - Page 419

ProSafe M5300 Switch Field Interface MAC Verify Failures Client Ifc Mismatch Description The untrusted and snooping enabled interface for which statistics to be displayed. Number of packets that were dropped by DHCP Snooping as there is no matching DHCP Snooping binding entry found. The number of DHCP messages that are dropped based on source MAC address and client HW address verification. DHCP Server Msgs Received The number of Server messages that are dropped on an un trusted port. Click CLEAR to clear all interfaces statistics. Click REFRESH to refresh the data on the screen with the latest statistics. IP Source Guard The IP Source Guard (IPSG) feature helps protect the network from attacks that use IP address spoofing to compromise or overwhelm the network. The source ID may be either the source IP address or a {source IP address, source MAC address} pair. You can configure: • Whether enforcement includes the source MAC address • Static authorized source IDs The DHCP snooping bindings database and static IPSG entries identify authorized source IDs. IPSG can be enabled on physical and LAG ports. If you enable IPSG on a port where DHCP snooping is disabled or where DHCP snooping is enabled but the port is trusted, all IP traffic received on that port is dropped depending on the admin-configured IPSG entries. The IP Source Guard folder contains links to the following features: • IP Source Guard Interface Configuration on page 420 • IP Source Guard Binding Configuration on page 420 Managing Device Security 419