Cisco 500 Series Administration Guide

Security
DHCP Snooping
Cisco 500 Series Stackable Managed Switch Administration Guide 470
21
STEP 4 Click Apply. The IP fragmentation is defined, and the Running Configuration file is
updated.
DHCP Snooping
See DHCPv4 Snooping/Relay.
IP Source Guard
IP Source Guard is a security feature that can be used to prevent traffic attacks
caused when a host tries to use the IP address of its neighbor.
When IP Source Guard is enabled, the device only transmits client IP traffic to IP
addresses contained in the DHCP Snooping Binding database. This includes both
addresses added by DHCP Snooping and manually-added entries.
If the packet matches an entry in the database, the device forwards it. If not, it is
dropped.
Interactions with Other Features
The following points are relevant to IP Source Guard:
• DHCP Snooping must be globally enabled in order to enable IP Source
Guard on an interface.
• IP source guard can be active on an interface only if:
- DHCP Snooping is enabled on at least one of the port's VLANs
- The interface is DHCP untrusted. All packets on trusted ports are
forwarded.
• If a port is DHCP trusted, filtering of static IP addresses can be configured,
even though IP Source Guard is not active in that condition by enabling IP
Source Guard on the port.

Cisco 500 Series Specifications

General

Model	Cisco 500 Series
Category	Switch
Mounting	Rack-mountable
Management	Web-based, CLI, SNMP
Ports	24, 48
Port Speed	10/100/1000 Mbps
PoE Support	Available on some models
Switching Capacity	Up to 176 Gbps
MAC Address Table Size	16, 000 entries
Security	ACLs, 802.1X
Quality of Service (QoS)	Yes
Dimensions	Varies by model
Weight	Varies by model
Humidity	10% to 90% non-condensing
Power Supply	Internal
Power Consumption	Varies by model
Jumbo Frame Support	Up to 9216 bytes