...
With the aim of preventing attacks on the local network via ARP poisoning, a managed switch can be set up to run the ARP Inspection feature. ARP Inspection scans all ARP packets and checks whether the addresses are stored in the tables DHCP Snooping Dynamic Bindings or DHCP Snooping Static Bindings (learned through DHCP snooping). ARP packets are forwarded in this case, and all other ARP packets are discarded.
...
- LCOS SX as of version 5.20 (download latest version)
- Any web browser for access to the web interface
- Configured and functional DHCP Snooping.
Procedure:
1) Configuring ARP Inspection:
...
- Sender IP Address: Enter the IP address of the device for which communication should be allowed.
- Sender MAC Address: Enter the MAC address of the device for which communication should be allowed.
- Action : Choose the option Permit to allow communication. Alternatively, with the option Deny can be used to prevent communication for the corresponding device.
...
| Info |
|---|
The start configuration is retained even if the device is restarted or there is a power failure. |
...