ZyXEL Communications GS1910 series User Manual page 42

Gs1910/xgs1910 series gbe smart managed switch
Hide thumbs Also See for GS1910 series:
Table of Contents

Advertisement

If you want to use dynamic bindings to filter unauthorized ARP packets (typical implementation),
you have to enable DHCP snooping before you enable ARP inspection.
Trusted vs. Untrusted Ports
Every port is either a trusted port or an untrusted port for DHCP snooping.
Trusted ports are connected to DHCP servers or other switches. The Switch learns dynamic bindings
from trusted ports.
Note: The Switch will drop all DHCP requests if you enable DHCP snooping and there are
no trusted ports.
Untrusted ports are connected to subscribers. The Switch discards DHCP packets from untrusted
ports in the following situations:
• The packet is a DHCP server packet (for example, OFFER, ACK, or NACK).
• The source MAC address and source IP address in the packet do not match any of the current
bindings.
• The packet is a RELEASE or DECLINE packet, and the source MAC address and source port do not
match any of the current bindings.
In the following example, you only want DHCP server A connected to port 5 to assign IP addresses
to all devices in VLAN 100. Create a VLAN containing ports 5, 6 and 7. Connect a computer (M) to
the Switch's port which is not in VLAN 100.
M
The settings in this tutorial are as the following.
Table 5 Settings in this Tutorial
HOST
DHCP Server (A)
DHCP Client (B)
DHCP Client (C)
Access the Switch through http://192.168.1.1. Log into the Switch by entering the username
1
(default: admin) and password (default: 1234).
See
Section 5.4 on page 34
2
Chapter 5 Tutorials
C
B
PORT
VLAN
CONNECTED
5
1 and 100
6
1 and 100
7
1 and 100
for how to create a VLAN and configure ports to join the VLAN.
GS1910/XGS1910 Series User's Guide
42
VLAN 100
A
DHCP SNOOPING PORT
PVID
TRUSTED
100
Yes
100
No
100
No

Advertisement

Table of Contents
loading

Table of Contents