C
HAPTER
13
| Security Measures
ARP Inspection
– 305 –
packets not matching any rules are dropped, and the DHCP snooping
bindings database check is bypassed.
â—† If Static is not specified, ARP packets are first validated against the
selected ACL; if no ACL rules match the packets, then the DHCP
snooping bindings database determines their validity.
PARAMETERS
These parameters are displayed in the web interface:
◆ ARP Inspection VLAN ID – Selects any configured VLAN. (Default: 1)
◆ ARP Inspection VLAN Status – Enables ARP Inspection for the
selected VLAN. (Default: Disabled)
â—† ARP Inspection ACL Name
â–
ARP ACL – Allows selection of any configured ARP ACLs.
(Default: None)
â–
Static – When an ARP ACL is selected, and static mode also
selected, the switch only performs ARP Inspection and bypasses
validation against the DHCP Snooping Bindings database. When an
ARP ACL is selected, but static mode is not selected, the switch first
performs ARP Inspection and then validation against the DHCP
Snooping Bindings database. (Default: Disabled)
WEB INTERFACE
To configure VLAN settings for ARP Inspection:
1. Click Security, ARP Inspection.
2. Select Configure VLAN from the Step list.
3. Enable ARP inspection for the required VLANs, select an ARP ACL filter
to check for configured addresses, and select the Static option to
bypass checking the DHCP snooping bindings database if required.
4. Click Apply.
Figure 164: Configuring VLAN Settings for ARP Inspection
To Next Page
Loading...
Need help?
General
