Impb Entry Settings - D-Link Xstack DES-3528 Series Reference Manual

xStack® DES-3528/DES-3552 Series Layer 2 Managed Stackable Fast Ethernet Switch Web UI Reference Guide
Parameter
Unit
From Port / To Port
IPv4 State / IPv6 State
Enabled (Strict)
Enabled (Loose)
Zero IP
DHCP Packet
Mode
Stop Learning
Threshold
Click the Apply button to accept the changes made.

IMPB Entry Settings

This window is used to create static IP-MAC-binding port entries and view all IMPB entries on the Switch.
To view this window, click Security > IP-MAC-Port Binding (IMPB) > IMPB Entry Settings, as shown below:
Description
Select a unit you want to configure.
Select a range of ports to set for IP-MAC-port binding.
Use the pull-down menu to enable or disable these ports for IP-MAC-port binding.
This mode provides a stricter method of control. If the user selects this mode, all
packets will be sent to the CPU, thus all packets will not be forwarded by the hardware
until the S/W learns the entries for the ports. The port will check ARP and IP packets by
IP-MAC-port binding entries. When the packet is found by the entry, the MAC address
will be set to dynamic state. If the packet is not found by the entry, the packets will be
dropped. The default mode is strict if not specified. The ports with strict mode will
capture unicast DHCP packets through the ACL module. If configuring IP-MAC-port
binding in strict mode when IP-MAC-port binding DHCP snooping is enabled, it will
create an ACL profile and the rules according to the ports. If there is not enough profile
or rule space for an ACL profile or rule table, it will return a warning message and will
not create an ACL profile and rules to capture unicast DHCP packets.
This mode provides a looser way of control. If the user selects loose mode, ARP
packets will be sent to the CPU. The packets will still be forwarded by the hardware until
a specific source MAC address is blocked by the software. The port will check ARP
packets by IP-MAC-port binding entries. When the packet is found by the entry, the
MAC address will be set to dynamic state. If the packet is not found by the entry, the
MAC address will be set to drop. Other packets will be bypassed.
Use the pull-down menu to enable or disable this feature. Allow zero IP configures the
state which allows ARP packets with 0.0.0.0 source IP to bypass.
By default, the DHCP packet with broadcast DA will be flooded. When set to disable, the
broadcast DHCP packet received by the specified port will not be forwarded in strict
mode. This setting is effective when DHCP snooping is enabled, in the case when a
DHCP packet which has been trapped by the CPU needs to be forwarded by the
software. This setting controls the forwarding behavior in this situation.
Toggle between ARP and ACL. When configuring the port mode to ACL, the Switch will
create an ACL access entry corresponding to the entries of this port. If the port changes
to ARP, all the ACL access entries will be deleted automatically. The default mode is
ARP.
Enter the number of blocked entries on the port. The value is from 0 to 500.
231