Table of Contents
Advertisement
6-6
Enable Learned-Table Lockdown
•
A standard bridge watches the source address of each packet it receives on any of its
interfaces. As new addresses are seen, entries are added to the learned table that con-
tains each source address and the interface number that address was received on. If a
source address is later seen on a different interface, the bridge will immediately change
the interface number in the learned-table entry. This condition could happen in a net-
work that is operating well if someone moved a computer to a different part of the net-
work. This could also happen if someone was trying to capture network packets by
fooling the bridge. Enabling learned-table lockdown will prevent the interface number
from being changed once the source address has been seen. A standard bridge will
also time-out the learned-table records every 10 minutes. If learned-table lockdown is
enabled, these records will not be timed out. Once a record is learned, it will not
change or be deleted until either the bridge reboots or the learned table become com-
pletely filled and needs to be reset. (NOTE: A typical SPEEDLAN learned table can con-
tain over 12,000 records.) The default value for this setting is disabled.
Enable Expanded IP ARP Support
•
Enabling this feature will cause the bridge to also watch the IP/ARP packets that occur
on the network. The SPEEDLAN brouters take no action in response to IP/ARP packets
(since that is the role of an IP router) except to add the IP address to its IP/ARP table.
This feature is helpful on an IP network because it will build a database of MAC-layer-
address-to-IP address pairs. An SNMP monitoring program, such as the SPEEDLAN
Configurator, can at any time extract this information. NOTE: 1) The IP/ARP table is
never timed out in this mode. 2) This feature is not available if the brouter is routing IP .
The default value for this setting is disabled.
Permit Ethernet Broadcasts
•
Standard Ethernet bridges will always forward broadcast packets. Many protocols do not
use broadcasts (e.g., AppleTalk Phase II, DECnet, and others). However, IP/ARP does use
broadcasts. If you do not use IP or any other protocol that requires broadcasts, you can
deny them. Shutting off broadcast packets will reduce the traffic being sent across your
wireless network link. This will also greatly reduce the number of interrupts that each
computer connected to your network experiences. Networks with a high number of
broadcasts will slow down the processing of all attached computers, even those that aren't
using the network.
Permit Ethernet Multicasts
•
Standard Ethernet bridges will always forward multicast packets. Some protocols do not use
multicast packets, such as TCP/IP and Novell IPX. If you do not use protocols that use
multicast packets, you can drop them by disabling multicast on the brouter. This will reduce
the traffic that is sent across the wireless network link. In addition, it reduces the number of
interrupts that each computer connected to your network experiences.
SPEEDLAN Installation and Operation User Guide
Bridging Setup
Advertisement
Table of Contents
