NETGEAR S3300 - Page 123

Configure System Information
123
S3300 Smart Managed Pro Switch
2. Select one or more ports or LAGs to configure.
For information about how to select and configure one or more ports and LAGs, see
Configuring Interface Settings on page 32.
3. From the Trust Mode list, select the desired trust mode. The factory default is Disabled.
• Disabled. The interface is considered to be untrusted and could potentially be used
to launch a network attack. DHCP server messages are checked against the bindings
database. On untrusted ports, DHCP snooping enforces the following security rules:
- DHCP packets from a DHCP server (DHCPOFFER, DHCPACK, DHCPNAK,
DHCPRELEASEQUERY) are dropped.
- DHCPRELEASE and DHCPDECLINE messages are dropped if the MAC address
is in the snooping database but the binding’s interface is other than the interface
where the message was received.
- DHCP packets are dropped when the source MAC address does not match the
client hardware address if MAC address validation is globally enabled.
• Enabled. If Trust Mode is enable, the DHCPv6 snooping application considers the
port as trusted and forwards DHCP server messages without validation.
4. From the Invalid Packets list, select the packet logging mode. The default is Disabled.
When enabled, the DHCPv6 snooping application generates a log message when an
invalid packet is received and dropped by the interface.
5. In the Rate Limit (pps) field, specify the rate limit value for DHCPv6 snooping purposes.
If the incoming rate of DHCPv6 packets exceeds the value of this object for consecutively
burst interval seconds, the port will be shut down. If this value is None, then the burst
interval has no meaning, and rate limiting is disabled. The default value is None. It can be
set to a value –1, which means None. The Rate Limit range is 0 to 300.
6. In the Burst Interval (secs) field, specify the burst interval value for rate limiting purposes
on this interface.
If the rate limit is None, then the burst interval has no meaning and the field displays N/A.
The default value is N/A. The range of Burst Interval is 1 to 15.
7. Click the Apply button to send the updated configuration to the switch. Configuration
changes take effect immediately.
8. Click the Cancel button to cancel the configuration on the screen and reset the data on the
screen to the latest value of the switch.
Binding Configuration
Use this screen to view, add, and remove static bindings in the DHCPv6 snooping bindings
database and to view or clear the dynamic bindings in the bindings table.
 To configure static DHCPv6 bindings:
1. Select System> Services > DHCPv6 Snooping > Binding Configuration.
2. From the Interface list, select the interface to add a binding into the DHCPv6 snooping
database.