D-Link DGS-3200-16 - Switch - Stackable User Manual page 113

xStack
The following fields can be set or modified:
Parameter
From Port/To Port
State
Enabled (Strict)
Enabled (Loose)
Allow Zero IP
Forward DHCP
Packet
Mode
Max Entry (1-50)
Click Apply to implement the settings made.
®
DGS-3200 Series Layer 2 Gigabit Ethernet Managed Switch
Figure 5 - 5. IMP Port Settings window
Description
Select a range of ports to set for IP-MAC-port binding.
Use the pull-down menu to enable or disable these ports for IP-MAC-port binding.
This mode provides a stricter method of control. If the user selects this mode, all packets will
be sent to the CPU, thus all packets will not be forwarded by the hardware until the S/W learns
the entries for the ports. The port will check ARP packets and IP packets by IP-MAC-port
binding entries. When the packet is found by the entry, the MAC address will be set to dynamic
state. If the packet is not found by the entry, the MAC address will be set to block. Other
packets will be dropped. The default mode is strict if not specified. The ports with strict mode
will capture unicast DHCP packets through the ACL module. If configuring IP-MAC-port
binding in strict mode when IP-MAC-port binding DHCP snooping is enabled, it will create an
ACL profile and the rules according to the ports. If there is not enough profile or rule space for
an ACL profile or rule table, it will return a warning message and will not create an ACL profile
and rules to capture unicast DHCP packets.
This mode provides a looser way of control. If the user selects loose mode, ARP packets and
IP broadcast packets will be sent to the CPU. The packets will still be forwarded by the
hardware until a specific source MAC address is blocked by the software. The port will check
ARP packets and IP broadcast packets by IP-MAC-port binding entries. When the packet is
found by the entry, the MAC address will be set to dynamic state. If the packet is not found by
the entry, the MAC address will be set to block. Other packets will be bypassed.
Use the pull-down menu to enable or disable this feature. Allow zero IP configures the state
which allows ARP packets with 0.0.0.0 source IP to bypass.
By default, the DHCP packet with broadcast DA will be flooded. When set to disable, the
broadcast DHCP packet received by the specified port will not be forwarded in strict mode.
This setting is effective when DHCP snooping is enabled, in the case when a DHCP packet
which has been trapped by the CPU needs to be forwarded by the software. This setting
controls the forwarding behavior in this situation.
Toggle between ARP and ACL. When configuring the port mode to ACL, the Switch will create
an ACL access entry corresponding to the entries of this port. If the port changes to ARP, all
the ACL access entries will be deleted automatically. The default mode is ARP.
Specifies the maximum number of DHCP snooping entries. By default, the per port maximum
entry is 5.
100