Arp Inspection - TRENDnet TI-PG1284i User Manual

TRENDnet User's Guide
MAC Address This field displays the source MAC address in the binding.
This field displays the IP address assigned to the MAC address in
IP Address
the binding.
Lease (Hour) This field displays how long the binding is valid.
VLAN This field displays the source VLAN ID in the binding.
Port This field displays the port number in the binding.
This field displays how the Switch learned the binding.
Static: This binding was learned from information provided
Type
manually by an administrator.
Dynamic: This binding was learned by snooping DHCP packets.
Action Click Delete to remove the specified entry.
Binding Table
Security > IP Source Guard > Binding Table > Binding Table
Bindings are used by DHCP snooping and ARP inspection to distinguish between
authorized and unauthorized packets in the network. The Switch learns the dynamic
bindings by snooping DHCP packets and from information provided manually in the Static
Entry Settings screen.
© Copyright 2016 TRENDnet. All Rights Reserved.
Parameter Description
MAC Address This field displays the source MAC address in the binding.
This field displays the IP address assigned to the MAC address in the
IP Address
binding.
Lease This field displays how long the binding is valid.
VLAN This field displays the source VLAN ID in the binding.
This field displays the port number in the binding. If this field is blank,
Port
the binding applies to all ports.
This field displays how the Switch learned the binding.
Static: This binding was learned from information provided
Type
manually by an administrator.
Dynamic: This binding was learned by snooping DHCP packets.

ARP Inspection

Dynamic ARP inspection is a security feature which validates ARP packet in a network by
performing IP to MAC address binding inspection. Those will be stored in a trusted
database (the DHCP snooping database) before forwarding. Dynamic ARP intercepts, logs,
and discards ARP packets with invalid IP-to-MAC address bindings. This capability protects
the network from certain man-in-the-middle attacks.
Dynamic ARP inspection ensures that only valid ARP requests and responses are relayed.
The switch performs these activities:

Intercepts all ARP requests and responses on untrusted ports.

Verifies that each of these intercepted packets has a valid IP-to-MAC address
binding before it updates the local ARP cache or before it forwards the packet to
the appropriate destination.
Trusted and untrusted port

This setting is independent of the trusted and untrusted setting of the DHCP
TI-PG1284i
140