Dell PowerConnect B-RX Configuration Manual page 61

TABLE 12
Enhancement
Passive Multicast Route
Insertion (PMRI)
IP Source Guard
Dynamic ARP Inspection
DHCP Snooping with Option 82 This feature allows the device to snoop DHCP
DoS Protection
Super ACLs
ACL-Based Mirroring
ip dns domain-list command
BigIron RX Series Configuration Guide
53-1002253-01
Summary of enhancements in release 02.4.00 (Continued)
Description
This new feature prevents unwanted multicast
traffic from being sent the CPU by conditionally
dropping unwanted multicast traffic in hardware.
IP source guard is used on client ports to prevent IP
source address spoofing.
Dynamic ARP Inspection (DAI) is a security feature
that can prevent Man-in-the-Middle (MiM) or ARP
spoofing/poisoning attacks.
packets for Dynamic ARP inspection and allows for
the insertion of DHCP Option 82 attributes into the
DHCP packet prior to relaying to the DHCP server.
This feature allows for monitoring the hit rate of the
ACL and drops matching traffic above a selected
rate and locking the port if the rate exceeds a
maximum allowed amount.
Super ACLs can match on any field in a packet
header from Layer 2 to Layer 4. Super ACLs support
all options currently supported in ACL and MAC
ACL, including QoS marking. Super ACLs may be
assigned numbered IDs only, from 500 - 599.
With this release, the Multi-Service IronWare
software supports using an ACL to select traffic for
mirroring from one port to another.
This feature is designed to define a list od domain
names that are used in order to resolve a host.
See page
Book: BigIron RX Series
Configuration Guide
Chapter: "Configuring IP
Multicast Protocols"
Section: "Passive Multicast
Route Insertion (PMRI)"
Book: BigIron RX Series
Configuration Guide
Chapter: "Inspecting and
Tracking DHCP Packets."
Section: "IP source guard"
Book: BigIron RX Series
Configuration Guide
Chapter: "Inspecting and
Tracking DHCP Packets"
Section: "Dynamic ARP
inspection"
Book: BigIron RX Series
Configuration Guide
Chapter: "Inspecting and
Tracking DHCP Packets"
Section: "DHCP relay agent
information (DHCP option
82)"
Book: BigIron RX Series
Configuration Guide
Chapter: "Protecting
Against Denial of Service
Attacks"
Section:"ACL-based
DOS-attack prevention"
Book: Foundry BigIron RX
Configuration Guide
Chapter: Access Control
List
Book: BigIron RX Series
Configuration Guide
Chapter:"Access Control
List"
Section: "ACL-based
inbound mirroring"
Book: BigIron RX Series
Configuration Guide
Chapter: "Configuring IP"
Section: "Defining a DNS
entry"
lxi