NETGEAR FSM7328SNA Administration Manual page 324

NETGEAR Managed Switches Software Administration Manual, Release 8.0
d. Click Apply. At the end of this configuration a screen similar to the following displays.
Figure 15-46
Now all the ARP packets received on the ports that are member of VLAN are copied to CPU for ARP
inspection. If there are trusted ports, it can configured as trusted port as in the next step. ARP packets
received on the trusted ports are not copied to the CPU.
Note: Make sure the Administrator PC has a DHCP snooping entry or accessing the device through the
trusted port for ARP. Otherwise you may get disconnected from the device.
6. Configure a port 1/0/1 as trusted.
a. From the main menu, select Security > Control > Dynamic ARP Inspection > DAI Interface
Configuration.
b. Select the checkbox for Interface 1/0/1.
c. Set the Trust Mode as Enable.
d. Click Apply. A screen similar to the following displays.
Figure 15-47
Now ARP packets from the DHCP client will be through since it has DHCP snooping entry, however ARP
packets from the static client is dropped, since it does have a DHCP snooping entry. It can be over come by
static configuration as described in
15-40
"Configuring Static Mapping" on page
v1.0, October 2009
15-41.
Security Management