Managing Device Security
421
ProSafe M5300 Switch
Static Binding Configuration
1. Interface - Selects the interface to add a binding into the IPSG database.
2. Use MAC Address to specify the MAC address for the binding.
3. Use VLAN ID to select the VLAN from the list for the binding rule.
4. Use IP Address to specify valid IP Address for the binding rule.
5. Click ADD to add IPSG static binding entry into the database.
6. Click DELETE to delete selected static entries from the database.
The Dynamic Binding Configuration table shows the following information:
Field Description
Interface Displays the interface to add a binding into the IPSG database.
MAC Address Displays the MAC address for the binding entry.
VLAN ID Displays the VLAN from the list for the binding entry.
IP Address Displays valid IP Address for the binding entry.
Filter Type Filter Type using on the interface. one is source IP address filter type, the other is
source IP address and MAC address filter type.
Click CLEAR to clear all the dynamic binding entries.
Dynamic ARP Inspection
malicious ARP packets. DAI prevents a class of man-in-the-middle attacks where an
unfriendly station intercepts traffic for other stations by poisoning the ARP caches of its
unsuspecting neighbors. The malicious attacker send ARP requests or responses mapping
another station’s IP address to its own MAC address.
When DAI is enabled, the switch drops ARP packets whose sender MAC address and
sender IP address do not match an entry in the DHCP snooping bindings database. You can
optionally configure additional ARP packet validation. When DAI is enabled on a VLAN, DAI
is enabled on the interfaces (physical ports or LAGs) that are members of that VLAN.
Individual interfaces are configured as trusted or untrusted. The trust configuration for DAI is
independent of the trust configuration for DHCP snooping.
The Dynamic ARP Inspection (DAI) folder contains links to the following features:
• DAI Configuration on page 422
• DAI VLAN Configuration on page 422
• DAI Interface Configuration on page 423
• DAI ACL Configuration on page 424
• DAI ACL Rule Configuration on page 424
• DAI Statistics on page 425