Terminal Filtering - Alaxala AX2200S Series Configuration Manual

Item
Information to be
registered
Aging timer

23.1.2 Terminal filtering

(1) Overview of terminal filtering
Terminal filtering discards all the communication data packets sent from terminals not
registered in the DB. Communication data packets sent from the terminals connected to
untrusted ports are subject to terminal filtering.
Enable terminal filtering, and then set filter conditions. Set one of the following three filter
conditions according to the security policy:

Terminal filtering for source IP addresses only

Terminal filtering for source IP addresses and source MAC addresses

Terminal filtering for source MAC addresses only
You can set terminal filtering for each port by using the
command.
Dynamic registration
Terminal MAC MAC address of a DHCP
address. client
Terminal IP address IP address handed out by the
DHCP server
IP addresses in the following ranges are available for
dynamic registration or static registration:


Terminal VLAN ID ID of the VLAN containing the port or channel group to which
the terminal is connected
Terminal port Number of the port or channel group to which the terminal is
number connected
Lease time Period of time between when
an entry is dynamically
registered and when the
entry is aged. The lease time
of the IP address handed out
by the DHCP server is used
for this item.
1.0.0.0 to 126.255.255.255
128.0.0.0 to 223.255.255.255
ip verify source
23 DHCP Snooping
Static registration
MAC addresses of terminals
with fixed-IP addresses
IP addresses of terminals
with fixed-IP addresses
Aging is not applicable.
configuration
409