7.3.1.3.1 Filter Table - WAGO 852-1305 Manual

100 Enhanced Features

7.3.1.3.1 Filter Table

Dynamic ARP inspections validates the packet by performing IP-to-MAC address
binding inspection stored in a trusted database (the "DHCP Snooping" database)
before forwarding the packet. If the switch detects an unauthorized ARP packet, it
automatically creates a MAC address filter to block traffic from the source MAC
address and the source VLAN ID of the packet. In addition, the switch regularly
deletes entries whose "Age Time" has expired.
• If ARP Inspection is enabled and the system detects invalid hosts, the
system creates a filtered entry in the MAC address table.
• If a port link fails and ARP Inspection is disabled, the switch deletes the
MAC filter entries for this port.
• If a port link fails and ARP Inspection is enabled, the switch deletes the
MAC filter entries for this port.
• The maximum number of entries in the MAC address filter table is 256.
• If the MAC address filter table for ARP inspection is full and the switch
receives an unauthorized ARP packet, it automatically creates a "SYSLOG"
and the ARP packet is dropped. The SYSLOG is created only once.
WAGO-ETHERNET-Zubehör 852
852-1305 8/4-Port 100BASE-T/1000BASE-SX/LX
Manual
1.1.0