Security > Port Security > Port Security Address Entries; Security > Arp Spoofing Prevention - D-Link DXS-1100 series User Manual

4 Configuration
Aging Type: Select the aging type here. Options to choose from are Absolute and Inactivity.
Absolute - All the secure addresses on this port age out exactly after the time specified and is
removed from the secure address list. This is the default type.
Inactivity - The secure addresses on this port age out only if there is no data traffic from the secure
source address for the specified time period.
Click Apply to accept the changes made.
Security > Port Security > Port Security Address Entries
This window is used to view, clear and configure the port security address entries.
The fields that can be configured are described below:
Port: Select the port used for the configuration here.
MAC Address: Enter the MAC address here. Tick Permanent so that all learned MAC address will not be
purged out unless the user manually deletes those entries.
VID: Enter the VLAN ID here. This value must be between 1 and 4094.
Click Add to add a new entry based on the information entered.
Click Delete to remove a new entry based on the information entered.
Click Clear by Port to clear the information based on the port selected.
Click Clear by MAC to clear the information based on the MAC address entered.
Click Clear All to clear all the information in this table.
Enter a page number and click Go to navigate to a specific page when multiple pages exist.
Security > ARP Spoofing Prevention
This window is used to view and configure the ARP spoofing prevention settings. When an entry is created,
ARP packets whose sender IP address matches the gateway IP address, of an entry, but its sender MAC
address field does not match the gateway MAC address, of the entry, will be dropped by the system. The
ASP will bypass the ARP packets whose sender IP address doesn't match the configured gateway IP
address.
If an ARP address matches a configured gateway's IP address, MAC address, and port list, then bypass the
Dynamic ARP Inspection (DAI) check no matter if the receiving port is ARP trusted or untrusted.
Figure 4.134 – Security > Port Security > Port Security Address Entries
Figure 4.135 – Security > ARP Spoofing Prevention
D-Link 10 Gigabit Ethernet Switch User Manual
9 4
9 4