D-Link DES-3528 User Manual page 146

xStack DES-3528 Series Layer 2 Stackable Fast Ethernet Managed Switch User Manual
The following fields can be set or modified:
Parameter
From Port...To Port
State
Strict
Loose
Allow Zero IP
Forward DHCP
Packet
Figure 9- 5. IMP Port Settings window
Description
Select a port or range of ports to set for IP-MAC Binding.
Use the pull-down menu to enable or disable these ports for IP-MAC Binding.
This mode provides a stricter method of control. If the user selects this mode, all packets will
be sent to the CPU, thus all packets will not be forwarded by the hardware until the S/W learns
the entries for the ports. The port will check ARP packets and IP packets by IP-MAC-PORT
Binding entries. When the packet is found by the entry, the MAC address will be set to
dynamic. If the packet is not found by the entry, the MAC address will be set to block. Other
packets will be dropped. The default mode is strict if not specified. The ports with strict mode
will capture unicast DHCP packets through the ACL module. If configuring IP-MAC binding port
enable in strict mode when IP-MAC binding DHCP_snoop is enabled, it will create an ACL
profile and the rules according to the ports. If there is not enough profile or rule space for ACL
profile or rule table, it will return a warning message and will not create ACL profile and rules to
capture unicast DHCP packets.
This mode provides a looser way of control. If the user selects loose mode, ARP packets and
IP Broadcast packets will be sent to the CPU. The packets will still be forwarded by the
hardware until a specific source MAC address is blocked by the software. The port will check
ARP packets and IP Broadcast packets by IP-MAC-PORT Binding entries. When the packet is
found by the entry, the MAC address will be set to dynamic. If the packet is not found by the
entry, the MAC address will be set to block. Other packets will be bypassed.
Use the pull-down menu to enable or disable this feature. Allow zero IP configures the state
which allows ARP packets with 0.0.0.0 source IP to bypass.
By default, the DHCP packet with broadcast DA will be flooded. When set to disable, the
broadcast DHCP packet received by the specified port will not be forwarded. This setting is
effective when DHCP snooping is enabled, under the case that DHCP packet which has been
130