Dell PowerConnect 8024 User Manual

Snooping and Inspecting Traffic 753
27
Snooping and Inspecting Traffic
This chapter describes Dynamic Host Configuration Protocol (DHCP)
Snooping, IP Source Guard (IPSG), and Dynamic ARP Inspection (DAI),
which are layer 2 security features that examine traffic to help prevent
accidental and malicious attacks on the switch or network.
The topics covered in this chapter include:
• Traffic Snooping and Inspection Overview
• Default Traffic Snooping and Inspection Values
• Configuring Traffic Snooping and Inspection (Web)
• Configuring Traffic Snooping and Inspection (CLI)
• Traffic Snooping and Inspection Configuration Examples
Traffic Snooping and Inspection Overview
DHCP Snooping is a security feature that monitors DHCP messages between
a DHCP client and DHCP server to filter harmful DHCP messages and to
build a bindings database. The IPSG and DAI features use the DHCP
Snooping bindings database to help enforce switch and network security.
IP Source Guard allows the switch to drop incoming packets that do not
match a binding in the bindings database. Dynamic ARP Inspection allows
the switch to drop ARP packets whose sender MAC address and sender IP
address do not match an entry in the DHCP snooping bindings database.

Dell PowerConnect 8024 Specifications

General

Switching Capacity	480 Gbps
Stackable	Yes
Device Type	Switch
Enclosure Type	Rack-mountable
Power Redundancy	Optional
Width	17.3 in
Height	1.7 in
Jumbo Frame Support	Yes
Ports	24 x 10 Gigabit SFP+
Management	Web-based GUI, Command Line Interface (CLI), SNMP
VLAN Support	Yes
Power Supply	Internal
Routing Protocol	Static routing
Features	Quality of Service (QoS), VLAN support
Compliant Standards	IEEE 802.3, IEEE 802.3u, IEEE 802.3ab, IEEE 802.3z
Operating Temperature	0 to 45 °C
Storage Temperature	-20 to 70 °C
Relative Humidity	10% to 90% (non-condensing)
MAC Address Table Size	32, 000 entries