Web-based Configuration Guide Security
17
4 Security
4.1 DHCP Snooping
4.1.1 Overview
The Dynamic Host Configuration Protocol (DHCP) snooping function allows a device to snoop DHCP packets
exchanged between clients and a server to record and monitor the IP address usage and filter out invalid DHCP
packets, including request packets from the clients and response packets from the server.
4.1.2 Configuration Steps
Choose Switch Settings > DHCP Snooping Settings.
Toggle the switch to On to enable DHCP snooping, select the trusted ports, and then click Save. When DHCP
snooping is enabled, request packets from DHCP clients are forwarded only to the trusted ports. For response
packets from DHCP servers, only those from the trusted ports are forwarded.
Note
The uplink port connected to the DHCP server is configured as the trusted port generally.
4.2 Storm Control
4.2.1 Overview
When a local area network (LAN) has excess broadcast, multicast, or unknown unicast data flows, the network
speed will slow down and packet transmission will have an increased timeout probability. This situation is called
a LAN storm, which may be caused by topology protocol execution errors or incorrect network configuration.
Users can perform storm control separately for the broadcast, unknown multicast, and unknown unicast data
flows. When the rate of broadcast, unknown multicast, or unknown unicast data flows received over a device
port exceeds the specified range, the device transmits only packets in the specified range and discards packets
beyond the range until the packet rate falls within the range. This prevents flooded data from entering the LAN
and causing a storm.
To Next Page
Loading...
Need help?
General