Please select To the mobile version | Continue to access the desktop computer version
 Forgot password?
 Register now


Switch

View: 3292|Reply: 1

Descriptions of the Security Function of the Switch

[Copy link]

18

Digests

1011

Posts

1164

Credits

administrator

Rank: 9Rank: 9Rank: 9

Credits
1164
Post time 2017-5-3 16:53:17 | Show all posts |Read mode
Descriptions of the Security Function of the Switch




Reply

Use magic Report

18

Digests

1011

Posts

1164

Credits

administrator

Rank: 9Rank: 9Rank: 9

Credits
1164
 Author| Post time 2017-5-3 16:53:33 | Show all posts
IP Source Guard + DHCP Snooping
DHCP Snooping maintains a database of user IP address, and provides data in the database to the IP Source Guard function for filtering so that only users who obtain IP addresses over DHCP can access the network. In this way, IP Source Guard + DHCP Snooping prevent users from setting static IP addresses at discretion.

The IP Source Guard function maintains an source IP address database, and sets user information (VLAN, MAC address, IP address, and port) in the database as hardware filtering entries so that only users whose information match the database can access the network.

The IP Source Guard conducts effective security control in DHCP according to the bound source IP address database. The IP Source Guard automatically synchronizes data of valid users in the database bound to the DHCP Snooping to the source IP address database bound to the IP Source Guard. In this way, the IP Source Guard can stringently filter client packets on the device where DHCP Snooping is enabled. ------Note: You can run the show ip source binding command to display the user IP addresses + MAC addresses bound to ip verify source.

In DHCP Snooping, the IP Source Guard must be enabled if ARP-check needs to be enabled. The configuration is as follows:
ip dhcp snooping
interface 0/x
ip verify source
arp-check

Reply Support Not support

Use magic Report

You have to log in before you can reply Login | Register now