NETGEAR FSM7328SNA Administration Manual page 335

NETGEAR Managed Switches Software Administration Manual, Release 8.0
CLI: Configuring Dynamic ARP Inspection
Enable DHCP snooping globally.
(Netgear Switch) (Config)# ip dhcp snooping
Enable DHCP snooping in a VLAN.
(Netgear Switch) (Config)# ip dhcp snooping vlan 1
Configure the port through which DHCP server is reached as trusted.
(Netgear Switch) (Config)# interface 1/0/1
(Netgear Switch) (Interface 1/0/1)# ip dhcp snooping trust
View the DHCP Snooping Binding table.
(GSM7328S) #show ip dhcp snooping binding
Total number of bindings:
MAC Address IP Address
-----------------
00:16:76:A7:88:CC
If the entry does not exist in the DHCP Snooping Binding table, it can statically added through the
command "ip verify binding <mac-address> vlan <vlan id> <ip address> interface <interface id>" in
the Global Configuration mode.
Enable IP Source Guard in the interface 1/0/2.
(GSM7352Sv2) (Interface 1/0/2)#ip verify source port-security
With this configuration device verifies both Source IP Address and Source MAC Address. If the port-
security option is skipped, device verifies only the Source IP Address.
Web Interface: Configuring Dynamic ARP Inspection
1. Enable DHCP snooping globally.
Security Management
1
VLAN
--------------- ----
192.168.10.86
v1.0, October 2009
Interface Type
----------- -------
1 1/0/2 DYNAMIC
Lease (Secs)
-----------
86400
15-51