Chapter 5 Tutorials

5Click Save to save the settings to the Switch.

5.6.2 Enabling Port Isolation

Follow the steps below to configure port isolation.

1Click Configuration > Private VLANs > Port Isolation.

2Select the check boxes of ports 2, 3 and 4, and click Save to add them to the isolated port list so that they cannot send traffic to each other.

From port 2, 3, or 4, you should be able to access the device that attaches to port 25, such as a server or default gateway.

5.7How to Use IP Source Guard and DHCP Snooping to Prevent Spoofed Traffic

IP source guard uses a binding table to allow or block IP traffic in your network. When the Switch receives an IP packet, it looks up the appropriate MAC address, VLAN ID, IP address, and port number in the binding table. If there is a binding, the Switch forwards the packet. If there is not a binding, the Switch discards the packet.

The Switch builds the binding table by snooping DHCP packets (dynamic bindings) and from information provided manually by administrators (static bindings).

Use DHCP snooping to filter unauthorized DHCP packets on the network and to build the binding table dynamically. This can prevent clients from getting IP addresses from unauthorized DHCP servers.

 

45

GS1910/XGS1910 Series User’s Guide