beautypg.com

Dhcp snooping, Dhcp snooping" on, Dhcp s – LevelOne GTL-2691 User Manual

Page 396

background image

C

HAPTER

13

| Security Measures

DHCP Snooping

– 396 –

IP Address – A valid unicast IP address, including classful types A, B

or C.

Dynamic Binding List

VLAN – VLAN to which this entry is bound.

MAC Address – Physical address associated with the entry.

Interface – Port to which this entry is bound.

IP Address – IP address corresponding to the client.

Lease Time – The time for which this IP address is leased to the client.

W

EB

I

NTERFACE

To display the binding table for IP Source Guard:

1.

Click Security, IP Source Guard, Dynamic Binding.

2.

Mark the search criteria, and enter the required values.

3.

Click Query

Figure 208: Showing the IP Source Guard Binding Table

DHCP S

NOOPING

The addresses assigned to DHCP clients on insecure ports can be carefully

controlled using the dynamic bindings registered with DHCP Snooping (or

using the static bindings configured with IP Source Guard). DHCP snooping

allows a switch to protect a network from rogue DHCP servers or other

devices which send port-related information to a DHCP server. This

information can be useful in tracking an IP address back to a physical port.