User's Manual

SPEEDLAN 8500 Series Installation and Operation User Guide
6-6 Bridging Setup
• Enable Learned-Table Lockdown
A standard IDU watches the source address of each packet it receives on any of its
interfaces. As new addresses are seen, entries are added to the learned table that con-
tains each source address and the interface number that address was received on. If a
source address is later seen on a different interface, the IDU will immediately change
the interface number in the learned-table entry. This condition could happen in a net-
work that is operating well if someone moved a computer to a different part of the net-
work. This could also happen if someone was trying to capture network packets by
fooling the IDU. Enabling learned-table lockdown will prevent the interface number
from being changed once the source address has been seen. A standard IDU will also
time-out the learned-table records every 10 minutes. If learned-table lockdown is
enabled, these records will not be timed out. Once a record is learned, it will not
change or be deleted until either the IDU reboots or the learned table become com-
pletely filled and needs to be reset. (NOTE: A typical SPEEDLAN learned table can con-
tain over 12,000 records.) The default value for this setting is disabled.
• Enable Expanded IP ARP Support
Enabling this feature will cause the IDU to also watch the IP/ARP packets that occur on
the network. The SPEEDLAN 8500 IDUs take no action in response to IP/ARP packets
(since that is the role of an IP router) except to add the IP address to its IP/ARP table.
This feature is helpful on an IP network because it will build a database of MAC-layer-
address-to-IP address pairs. An SNMP monitoring program, such as the SPEEDLAN
Configurator, can at any time extract this information. NOTE: 1) The IP/ARP table is
never timed out in this mode. 2) This feature is not available if the IDU is routing IP. The
default value for this setting is disabled.
• Permit Ethernet Broadcasts
Standard Ethernet IDUs will always forward broadcast packets. Many protocols do not use
broadcasts (e.g., AppleTalk Phase II, DECnet, and others). However, IP/ARP does use
broadcasts. If you do not use IP or any other protocol that requires broadcasts, you can
deny them. Shutting off broadcast packets will reduce the traffic being sent across your
wireless network link. This will also greatly reduce the number of interrupts that each
computer connected to your network experiences. Networks with a high number of
broadcasts will slow down the processing of all attached computers, even those that aren't
using the network.
• Permit Ethernet Multicasts
Standard Ethernet IDUs will always forward multicast packets. Some protocols do not use
multicast packets, such as TCP/IP and Novell IPX. If you do not use protocols that use
multicast packets, you can drop them by disabling multicast on the IDU. This will reduce the
traffic that is sent across the wireless network link. In addition, it reduces the number of
interrupts that each computer connected to your network experiences.