Cisco Sg3008 Manual

Security
ARP Inspection
374 Cisco Small Business 200, 300 and 500 Series Managed Switch Administration Guide (Internal Version) 
18
STEP 1Click Security > ARP Inspection > Properties.
Enter the following fields:
•ARP Inspection Status—Select to enable ARP Inspection.
•ARP Packet Validation—Select to enable the following validation checks:
-Source MAC — Compares the packets source MAC address in the 
Ethernet header against the senders MAC address in the ARP request. 
This check is performed on both ARP...

Security
ARP Inspection
Cisco Small Business 200, 300 and 500 Series Managed Switch Administration Guide (Internal Version)  375
18
 
STEP  3Select Tr u s t e d or Untrusted and click Apply to save the settings to the Running 
Configuration file.
Defining ARP Inspection Access Control
To add entries to the ARP Inspection table: 
STEP 1Click Security > ARP Inspection > ARP Access Control.
STEP  2To add an entry, click Add.
STEP  3Enter the fields:
•ARP Access Control Name—Enter a user-created name.
•MAC...

Security
First Hop Securit y
376 Cisco Small Business 200, 300 and 500 Series Managed Switch Administration Guide (Internal Version) 
18
Defining ARP Inspection VLAN Settings
To enable ARP Inspection on VLANs and associate Access Control Groups with a 
VLAN:
STEP 1Click Security > ARP Inspection > VLAN Settings.
STEP  2To enable ARP Inspection on a VLAN, move the VLAN from the Available VL ANs 
list to the Enabled VLANs list. 
STEP  3To associate an ARP Access Control group with a VLAN, click Add. Select...

Security
First Hop Security
Cisco Small Business 200, 300 and 500 Series Managed Switch Administration Guide (Internal Version)  377
18
  

Security
First Hop Securit y
378 Cisco Small Business 200, 300 and 500 Series Managed Switch Administration Guide (Internal Version) 
18 

Security
First Hop Security
Cisco Small Business 200, 300 and 500 Series Managed Switch Administration Guide (Internal Version)  379
18
  

Security
First Hop Securit y
380 Cisco Small Business 200, 300 and 500 Series Managed Switch Administration Guide (Internal Version) 
18 

19
Cisco Small Business 200, 300 and 500 Series Managed Switch Administration Guide (Internal Version)  381
 
Security: 802.1X Authentication
This section describes 802.1X authentication. 
It covers the following topics:
•Overview of 802.1X
•Authenticator Overview
•Common Tasks
•802.1X Configuration Through the GUI
•Defining Time Ranges
•Authentication Method and Port Mode Support
Overview of 802.1X 
802.1x authentication restricts unauthorized clients from connecting to a LAN 
through...

Security: 802.1X Authentication
Overview of 802.1X
382 Cisco Small Business 200, 300 and 500 Series Managed Switch Administration Guide (Internal Version) 
19
This is described in the figure below:
A network device can be either a client/supplicant, authenticator or both per port. 
Client or Supplicant
A client or supplicant is a network device that requests access to the LAN. The 
client is connected to an authenticator. 
If the client uses the 802.1x protocol for authentication, it runs the supplicant...

Security: 802.1X Authentication
Authenticator Overview
Cisco Small Business 200, 300 and 500 Series Managed Switch Administration Guide (Internal Version)  383
19
 
See Port Host Modes for more information.
The following authentication methods are supported:
•802.1x-based—Supported in all authentication modes.
•MAC-based—Supported in all authentication modes.
•WEB-based—Supported only in multi-sessions modes.
In 802.1x-based authentication, the authenticator extracts the EAP messages from 
the 802.1x...