Chapter 26 IP Source Guard

 

 

 

 

Table 86 DHCP Snooping VLAN Configure (continued)

 

LABEL

DESCRIPTION

 

End VIDEnter the highest VLAN ID you want to manage in the section below.

 

 

 

 

Apply

Click this to display the specified range of VLANs in the section below.

 

 

 

 

VID

This field displays the VLAN ID of each VLAN in the range specified above. If you configure the

 

 

* VLAN, the settings are applied to all VLANs.

 

 

 

 

Enabled

Select Yes to enable DHCP snooping on the VLAN. You still have to enable DHCP snooping on

 

 

the Switch and specify trusted ports.

 

 

Note: The Switch will drop all DHCP requests if you enable DHCP snooping and there are no

 

 

trusted ports.

 

 

 

 

Option82

Select this to have the Switch add the slot number, port number and VLAN ID to DHCP

 

 

requests that it broadcasts to the DHCP VLAN, if specified, or VLAN. You can specify the DHCP

 

 

VLAN in the DHCP Snooping Configure screen. See Section 26.5 on page 223.

 

 

 

 

Information

Select this to have the Switch add the system name to DHCP requests that it broadcasts to the

 

 

DHCP VLAN, if specified, or VLAN. You can configure the system name in the General Setup

 

 

screen. See Chapter 8 on page 84. You can specify the DHCP VLAN in the DHCP Snooping

 

 

Configure screen. See Section 26.5 on page 223.

 

 

 

 

Apply

Click Apply to save your changes to the Switch’s run-time memory. The Switch loses these

 

 

changes if it is turned off or loses power, so use the Save link on the top navigation panel to

 

 

save your changes to the non-volatile memory when you are done configuring.

 

 

 

 

Cancel

Click this to reset the values in this screen to their last-saved values.

 

 

 

26.6 ARP Inspection Status

Use this screen to look at the current list of MAC address filters that were created because the Switch identified an unauthorized ARP packet. When the Switch identifies an unauthorized ARP packet, it automatically creates a MAC address filter to block traffic from the source MAC address and source VLAN ID of the unauthorized ARP packet. To open this screen, click Advanced Application > IP Source Guard > ARP Inspection.

Figure 123 ARP Inspection Status

The following table describes the labels in this screen.

Table 87 ARP Inspection Status

LABEL

DESCRIPTION

Total number

This field displays the current number of MAC address filters that were created because the

of filtersSwitch identified unauthorized ARP packets.

 

 

Index

This field displays a sequential number for each MAC address filter.

 

 

MAC Address

This field displays the source MAC address in the MAC address filter.

 

 

VID

This field displays the source VLAN ID in the MAC address filter.

 

 

Port

This field displays the source port of the discarded ARP packet.

 

 

 

227

ES3500 Series User’s Guide