G Eneral S Ecurity S Ettings; Ip Filter Security - Edge-Core ECS4310-26T Management Manual

21
IP F S
ILTER ECURITY
G S
ENERAL
This chapter includes the following sections for other general security
settings:
◆ "IP Filter Security" on page 113
"Storm Control Setting" on page 114
◆
"Port Isolation" on page 116
◆
"Defence Engine" on page 117
◆
IP Filter Security is a feature that filters IP traffic on port interfaces based
on manually configured entries in the IP Filter table, or allowed IP address
assignment through DHCP. IP Filter Security can be used to prevent traffic
attacks caused when a host tries to use the IP address of a neighbor to
access the network.
P
ARAMETERS
The following parameters are displayed on the IP Filter Setting page:
Port – Port number.
◆
Mode – Configures the switch to filter traffic based on IP addresses.
◆
(Default: IP Filter Disable)
IP Filter Disable – Disables IP filtering on the port.
■
Static – Enables traffic filtering based on IP addresses configured in
■
the table.
DHCP – Enables traffic filtering based on IP addresses assigned
■
through DHCP.
◆ IP Address — An IP address, or an address specifying a range, that is
allowed access through the switch.
◆ IP Netmask — A mask that specifies a single IP address, or defines a
range of IP addresses. (Default: 255.255.255.0)
DHCP Server Allowed — Permits traffic from a DHCP server through
◆
the specified ports. (Default: All ports allowed)
– 113 –
S
ECURITY ETTINGS