D-Link DGS-1510 Series - ARP Spoofing Prevention; BPDU Attack Protection

DGS-1510 Series Gigabit Ethernet SmartPro Switch Web UI Reference Guide
319
State
Select to enable or disable the DHCP server screening function on the
port(s) specified.
Server IP
Enter the DHCP server’s IP address here.
Profile Name
Enter the DHCP server screening profile that will be used for the
port(s) specified here.
Click the Apply button to accept the changes made.
Click the Delete button to remove the specified entry.
ARP Spoofing Prevention
This window is used to view and configure the ARP spoofing prevention settings. When an entry is
created, ARP packets whose sender IP address matches the gateway IP address, of an entry, but its
sender MAC address field does not match the gateway MAC address, of the entry, will be dropped by the
system. The ASP will bypass the ARP packets whose sender IP address doesn’t match the configured
gateway IP address.
If an ARP address matches a configured gateway’s IP address, MAC address, and port list, then bypass
the Dynamic ARP Inspection (DAI) check no matter if the receiving port is ARP trusted or untrusted.
To view the following window, click Security > ARP Spoofing Prevention, as shown below:
Figure 9-61 ARP Spoofing Prevention window
The fields that can be configured are described below:
Parameter Description
Unit
Select the switch unit that will be used for this configuration here.
From Port / To Port
Select the appropriate port range used for the configuration here.
Gateway IP
Enter the gateway’s IP address used here.
Gateway MAC
Enter the gateway’s MAC address used here.
Click the Apply button to accept the changes made.
Click the Delete button to remove the specified entry.
BPDU Attack Protection
This window is used to view and configure the BPDU attack protection settings. In generally, there are
two states in the BPDU attack protection function. One is normal state, and another is under attack state.