User manual D-LINK DGS-3200-10

[. . . ] _____________________________________________ Information in this document is subject to change without notice. Reproduction in any manner whatsoever without the written permission of D-Link Corporation is strictly forbidden. Trademarks used in this text: D-Link and the D-LINK logo are trademarks of D-Link Corporation; Microsoft and Windows are registered trademarks of Microsoft Corporation. Other trademarks and trade names may be used in this document to refer to either the entities claiming the marks and names or their products. [. . . ] To prevent the Switch FDB from overloading in case of an ARP DoS attack, the administrator can configure the threshold when a port should stop learning illegal MAC addresses. Entering 500 means the port will enter the Stop Learning state after 500 illegal MAC entries and will not allow additional MAC entries, neither legal nor illegal, to be learned on this port. In the Stop Learning state, the port will also automatically purge all blocked MAC entries on this port. Entering 0 means no limit has been set and the port will keep learning illegal MAC addresses. ® Mode IMPB Entry Settings This window is used to create static IP-MAC-binding port entries and view all IMPB entries on the Switch. 135 xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide To view this window , click Security > IP-MAC-Port Binding (IMPB) > IMPB Entry Settings as shown below: ® Figure 6 - 8. IMPB Entry Settings window The following fields can be set or modified: Parameter IPv4 Address IPv6 Address MAC Address Ports Description Click the radio button and enter the IPv4 address to bind to the MAC address set below. Click the radio button and enter the IPv6 address to bind to the MAC address set below. Specify the switch ports for which to configure this IP-MAC binding entry (IP Address + MAC Address). Click the All check box to configure this entry for all ports on the Switch. Click View All for the table to display all entries or Delete All to remove all the static entries. MAC Block List This window is used to view unauthorized devices that have been blocked by IP-MAC binding restrictions. to view this window , click Security > IP-MAC-Port Binding (IMPB) > MAC Block List , as shown below: Figure 6 - 9. MAC Block List window The following fields can be configured: Parameter VLAN Name MAC Address Description Enter the name of the VLAN you want to find or delete. To find an unauthorized device MAC address that has been blocked by the IP-MAC binding restrictions, enter the VID and MAC Address in the appropriate fields and click Find. To delete an entry, click the Delete button next to the entry’s port. To delete all the entries in this window, click the Delete All button. 136 xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide ® DHCP Snooping DHCP Snooping Maximum Entry Settings This window is used to configure the maximum DHCP snooping entry for ports on this page. To view the following window, click Security > IP-MAC-Port Binding (IMPB) > DHCP Snooping > DHCP Snooping Maximum Entry Settings: Figure 6 - 10. DHCP Snooping Maximum Entry Settings window The following fields can be configured: Parameter From Port / To Port Maximum Entry (150) Maximum IPv6 Entry (1-50) Description Use the drop-down menus to select a range of ports to use. Tick the No Limit check box to have unlimited maximum number of the learned entries. Tick the No Limit check box to have unlimited maximum number of the learned entries. [. . . ] When the IP-MAC Binding trap is enabled, if there's a new MAC that violates the pre-defined IPv6 IP-MAC Binding configuration, a trap will be sent out. The same illegal DHCP server IP address detected is just sent once to the trap receivers within the log ceasing unauthorized duration. The commander switch will send swSingleIPMSColdStart notification to the indicated 1. 12 swSingleIPMSWarmStart notification to the indicated host when its member generates a warm start notification. [. . . ]