Cambium Networks cnMatrix EX2028 Handleiding (320 Pagina's)

Handleiding

/ 320

Je bekijkt pagina 257 van 320

Security Features 257

1. Type the configure terminal command into the terminal. Press the Enterkey.

2. Type the interface gigabitethernet 0/2 command into the terminal to select an interface to be

configured. Press the Enterkey.

3. Type the ip igmp max-groups 20 command into the terminal. Press the Enterkey to set the

maximum number of IGMP groups that the interface can join.

Note

No maximum value is set by default.

4. Type the end command into theterminal to go to the Privileged EXEC mode. Press the Enterkey.

5. Type the show running-config interface gigabitethernet 0/2 command into the terminal to display

the operating configuration in the systemfor a certain interface.

For more information, see IGMP Snooping Parameters and Commands.

DHCP Snooping

Managing DHCP Snooping

FeatureDescription

The DHCP Snooping feature intercepts all DHCP packets from untrusted ports and after inserting the

port specific information (option 82), forwards the DHCP client side packets on trusted ports. This option

82 will be used to redirect the DHCP responses from a server to the appropriate untrusted port. DHCP

snooping binding table will be updated when a valid IP address is allocated for a host.

DHCP Snooping is a feature that filters untrusted DHCP messages and builds a binding database table. It

acts as a firewall between untrusted hosts and DHCP servers. These untrusted messages are sent from

devices outside a network and are usually sources of traffic attacks.

Standards

l

The DHCP Snooping feature has been built in accordance with RFC7513.

Scaling Numbers

l

N/A

Limitations

l

DHCP Snooping is limited by the internal binding table. There is a maximum of 254 binding table

entries. Beyond this number, the table will not be updated anymore, but the DHCP offers will be

forwarded to the clients.

Web User Interface

l

DHCP Snooping parameters are configurable via the Web UI. Global DHCP Snooping status can be

enabled or disabled and operational parameters configured on Layer 2 > DHCP Snooping >

System.

l

Per-VLAN DHCP Snooping status is controlled through Layer 2 > DHCP Snooping > VLAN

Settings.

/ 320

Bekijk gratis de handleiding van Cambium Networks cnMatrix EX2028, stel vragen en lees de antwoorden op veelvoorkomende problemen, of gebruik onze assistent om sneller informatie in de handleiding te vinden of uitleg te krijgen over specifieke functies.