User manual D-LINK DGS-3200-10

[. . . ] _____________________________________________ Information in this document is subject to change without notice. Reproduction in any manner whatsoever without the written permission of D-Link Corporation is strictly forbidden. Trademarks used in this text: D-Link and the D-LINK logo are trademarks of D-Link Corporation; Microsoft and Windows are registered trademarks of Microsoft Corporation. Other trademarks and trade names may be used in this document to refer to either the entities claiming the marks and names or their products. [. . . ] Use the drop-down menu to enable or disable these ports for IP-MAC Binding. enabled (Strict) – This state provides a stricter method of control. If the user selects this mode, all packets are blocked by the Switch by default. The Switch will compare all incoming ARP and IP Packets and attempt to match them against the IMPB white list. If the IP-MAC pair matches the white list entry, the packets from that MAC address are unblocked. If not, the MAC address will stay blocked. While the Strict state uses more CPU resources from checking every incoming ARP and IP packet, it enforces better security and is thus the recommended setting. enabled (Loose) – This mode provides a looser way of control. If the user selects loose mode, the Switch will forward all packets by default. However, it will still inspect incoming ARP packets and compare them with the Switch’s IMPB white list entries. If the IP-MAC pair of a packet is not found in the white list, the Switch will block the MAC address. A major benefit of Loose state is that it uses less CPU resources because the Switch only checks incoming ARP packets. However, it also means that Loose state cannot block users who send only unicast IP packets. An example of this is that a malicious user can perform DoS attacks by statically configuring the ARP table on their PC. In this case, the Switch cannot block such attacks because the PC will not send out ARP packets. Zero IP Use the drop-down menu to enable or disable this feature. Once Enabled, the Switch will allow ARP packets with a Source IP of 0. This is useful in some scenarios when a client (for example, a wireless Access Point, ) sends out an ARP request packet before accepting the IP address from a DHCP server. In this case, the ARP request packet sent out from the client will contain a Source IP of 0. The Switch will need to allow such packets to pass, or else the client cannot know if there is another duplicate IP address in the network. DHCP Packet By default, the Switch will forward all DHCP packets. However, if the port state is set to Strict, all DHCP packets will be dropped. [. . . ] 13 swSingleIPMSLinkDown notification to the indicated host when its member generates a link down notification. 14 swSingleIPMSLinkUp notification to the indicated host when its member generates a link up notification. The commander switch will send swSingleIPMSAuthFail notification to the indicated host when its member generates an authentication failure notification The commander switch will send swSingleIPMSnewRoot notification to the indicated host when its member generates a new root notification. 17 xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide swSingleIPMSTopologyChange notification to the indicated host when its member generates a topology change notification. [. . . ]