User manual

C HAPTER 4 | Configuring the Switch
Configuring Security
– 116 –
◆ Mode – Enables Dynamic ARP Inspection on a given port. Only when
both Global Mode and Port Mode on a given port are enabled, will ARP
Inspection be enabled on a given port. (Default: Disabled)
WEB INTERFACE
To configure global and port settings for ARP Inspection:
1. Click Advanced Configuration, Security, Network, ARP Inspection,
Configuration.
2. Enable ARP inspection globally, and on any ports where it is required.
3. Click Save.
Figure 39: Configuring Global and Port Settings for ARP Inspection
CONFIGURING STATIC BINDINGS FOR ARP INSPECTION
Use the Static ARP Inspection Table to bind a static address to a port. Table
entries include a port identifier, VLAN identifier, source MAC address in ARP
request packets, and source IP address in ARP request packets.
ARP Inspection uses the DHCP snooping bindings database for the list of
valid IP-to-MAC address bindings. Static ARP entries take precedence over
entries in the DHCP snooping bindings database. The switch first compares
ARP packets to any entries specified in the static ARP table. If no static
entry matches the packets, then the DHCP snooping bindings database
determines their validity.
PATH
Advanced Configuration, Security, Network, ARP Inspection, Static Table
PARAMETERS
These parameters are displayed:
◆ Port – Port identifier.
◆ VLAN ID – ID of a configured VLAN (Range: 1-4094)