Enabling Port Isolation; How To Use Ip Source Guard And Dhcp Snooping To Prevent Spoofed Traffic - ZyXEL Communications GS1910 series User Manual

Click Save to save the settings to the Switch.
5

5.6.2 Enabling Port Isolation

Follow the steps below to configure port isolation.
Click Configuration > Private VLANs > Port Isolation.
1
Select the check boxes of ports 2, 3 and 4, and click Save to add them to the isolated port list so
2
that they cannot send traffic to each other.
From port 2, 3, or 4, you should be able to access the device that attaches to port 25, such as a
server or default gateway.
5.7 How to Use IP Source Guard and DHCP Snooping to
Prevent Spoofed Traffic
IP source guard uses a binding table to allow or block IP traffic in your network. When the Switch
receives an IP packet, it looks up the appropriate MAC address, VLAN ID, IP address, and port
number in the binding table. If there is a binding, the Switch forwards the packet. If there is not a
binding, the Switch discards the packet.
The Switch builds the binding table by snooping DHCP packets (dynamic bindings) and from
information provided manually by administrators (static bindings).
Use DHCP snooping to filter unauthorized DHCP packets on the network and to build the binding
table dynamically. This can prevent clients from getting IP addresses from unauthorized DHCP
servers.
Chapter 5 Tutorials
GS1910/XGS1910 Series User's Guide
41