Вот пожалуйста viewtopic.php?t=48538

Иван, спасибо но поравьте время обновления темы-то!

"Добавлено: Ср Ноя 21, 2007 19:18 Заголовок сообщения: Новая FW 5.01-B52 для DES-3526/3550"

Последнее сообщение:
Ср Ноя 21, 2007 19:18


я туда и не смотрю-какой же релиз в 2007 году)))

и собсно - когда выйдет описание- тоже появится прикреплённая тема?

Всмысле мануалы?

да

Мануалы для R5.1 тоже выложены ftp://ftp.dlink.ru/pub/Switch/DES-3526_ ... scription/

спасибо большущее

Не за что!

В продолжении темы...

Количество ARP пакетов в общем трафике >80%

В ядре стоит 3627G не успевает пережовывать. Для сохранения управляемости на его линках (3526) включил SafeGuardEngine - начали тухнуть 3526. Включил в догонку тоже самое на 3627 тоже начал тухнуть периодчески.

No,"Протокол","MAC-адреса","IP-адреса","Порты","Время","Размер"
1,"ARP REQ","00:1B:38:D0:92:6F <=> Broadcast","10.0.3.242 -?- 10.0.0.255","N/A","16:30:30,411907","60"
2,"ARP REQ","00:0F:EA:61:35:74 <=> Broadcast","10.0.4.175 -?- 10.0.0.169","N/A","16:30:30,416953","60"
3,"ARP REQ","00:19:21:5D:B3:65 <=> Broadcast","10.0.6.39 -?- 10.0.0.148","N/A","16:30:30,417629","60"
4,"ARP REQ","00:1B:38:D0:92:6F <=> Broadcast","10.0.3.242 -?- 10.0.0.255","N/A","16:30:30,438982","60"
5,"ARP REQ","EpoxComput:97:A4:E8 <=> Broadcast","10.0.6.164 -?- 10.0.0.179","N/A","16:30:30,637817","60"
6,"ARP REQ","00:1B:FC:72:2D:2C <=> Broadcast","10.0.0.70 -?- 10.0.7.19","N/A","16:30:30,745088","60"
7,"ARP REQ","00:1B:FC:D0:42:B9 <=> Broadcast","10.0.2.120 -?- 10.0.0.93","N/A","16:30:30,976028","60"
8,"ARP REQ","RealtekSem:4B:AA:01 <=> Broadcast","10.0.6.33 -?- 10.0.5.61","N/A","16:30:30,988834","60"
9,"ARP REQ","00:18:F3:83:7F:8F <=> Broadcast","10.0.0.219 -?- 10.0.0.120","N/A","16:30:31,002679","60"
10,"802.2","RealtekSem:4A:62:66 <=> Broadcast","N/A","N/A","16:30:31,004301","60"
11,"ARP REQ","RealtekSem:99:01:7F <=> Broadcast","10.0.2.162 -?- 10.0.3.223","N/A","16:30:31,060721","60"
12,"ARP REQ","EpoxComput:95:02:8E <=> Broadcast","10.0.1.113 -?- 10.0.4.236","N/A","16:30:31,098378","60"
13,"ARP REQ","EpoxComput:5C:38:7E <=> Broadcast","10.0.7.177 -?- 10.0.0.10","N/A","16:30:31,187776","60"
14,"ARP REQ","00:17:9A:BF:D9:7E <=> Broadcast","10.0.1.86 -?- 10.0.7.255","N/A","16:30:31,311650","60"
15,"ARP REQ","RealtekSem:99:01:7F <=> Broadcast","10.0.2.162 -?- 10.0.3.224","N/A","16:30:31,341720","60"
16,"ARP REQ","00:1F:D0:5D:9F:13 <=> Broadcast","10.0.3.239 -?- 10.0.4.14","N/A","16:30:31,382348","60"
17,"ARP REQ","EpoxComput:A5:37:61 <=> Broadcast","10.0.2.255 -?- 10.0.7.23","N/A","16:30:31,508038","60"
18,"ARP REQ","EpoxComput:92:33:F0 <=> Broadcast","10.0.1.239 -?- 10.0.1.34","N/A","16:30:31,550746","60"
19,"802.2","EpoxComput:92:33:F0 <=> Broadcast","N/A","N/A","16:30:31,560052","98"
20,"ARP REQ","00:0F:EA:61:35:74 <=> Broadcast","10.0.4.175 -?- 10.0.0.170","N/A","16:30:31,591413","60"
21,"ARP REQ","00:17:31:AD:53:F9 <=> Broadcast","10.0.3.76 -?- 10.0.3.93","N/A","16:30:31,608199","60"
22,"ARP REQ","00:1F:C6:DF:05:72 <=> Broadcast","10.0.3.93 -?- 10.0.6.55","N/A","16:30:31,634699","60"
23,"ARP REQ","RealtekSem:51:A8:4D <=> Broadcast","10.0.6.194 -?- 10.0.0.110","N/A","16:30:31,642438","60"
24,"802.2","RealtekSem:4A:62:66 <=> Broadcast","N/A","N/A","16:30:31,663563","60"
25,"ARP REQ","00:13:20:1D:59:1D <=> Broadcast","10.0.0.253 -?- 10.0.0.135","N/A","16:30:31,678657","60"
26,"ARP REQ","EpoxComput:95:02:8E <=> Broadcast","10.0.1.113 -?- 10.0.4.237","N/A","16:30:31,693815","60"
27,"ARP REQ","EpoxComput:92:33:F0 <=> Broadcast","10.0.1.239 -?- 10.0.1.35","N/A","16:30:31,781059","60"
28,"ARP REQ","EpoxComput:A0:3C:88 <=> Broadcast","10.2.129.0 -?- 10.0.21.212","N/A","16:30:31,787227","60"
29,"ARP REQ","00:1B:FC:D0:42:B9 <=> Broadcast","10.0.2.120 -?- 10.0.2.70","N/A","16:30:31,787266","60"
30,"ARP REQ","RealtekSem:99:01:7F <=> Broadcast","10.0.2.162 -?- 10.0.3.225","N/A","16:30:31,841600","60"
31,"ARP REQ","00:13:D3:C7:48:28 <=> Broadcast","10.0.7.16 -?- 10.0.0.61","N/A","16:30:32,040275","60"
32,"ARP REQ","00:1B:FC:F5:88:CD <=> Broadcast","10.0.1.248 -?- 10.0.0.1","N/A","16:30:32,123598","60"
33,"ARP REQ","00:1E:8C:A3:B2:C3 <=> Broadcast","10.0.3.100 -?- 10.0.0.204","N/A","16:30:32,125926","60"
34,"ARP REQ","RealtekSem:4B:AA:01 <=> Broadcast","10.0.6.33 -?- 10.0.5.62","N/A","16:30:32,174642","60"

Как с этим бороться ?
почему броадкастом в этих пакетах выступает любой адрес в запросе ?

Какая у Вас текущая версия прошивки? И используется ли IP-интерфейс System в процессе маршрутизации клиентского трафика? Похоже что у Вас обычный ARP spoofing. Бороться с ним лучше при помощи ACL и ARP Spoofing Prevention на уровне доступа.

ядро
DGS-3627G
Firmware Version : Build 2.40.B77
Hardware Version : 1A1G

уровень доступа
3026
Firmware Version : Build 3.00.053
Hardware Version : A3
3526
Firmware Version : Build 5.01-B09
Hardware Version : A4G

Вообще-то на доступе прошивки лучше заменить. Вам выслать?

Да и для
3550
Firmware Version : Build 5.01.B52
Hardware Version : A4G

Странность есть еще, во всех вланах гуляют пакеты

754,"EAPOL","00:11:5B:84:DE:15 <=> 01:80:C2:00:00:03","N/A","N/A","13:10:54,213806","1512"
755,"EAPOL","00:11:5B:84:DE:15 <=> 01:80:C2:00:00:03","N/A","N/A","13:10:54,430925","1468"
756,"EAPOL","00:11:5B:84:DE:15 <=> 01:80:C2:00:00:03","N/A","N/A","13:10:54,650315","1464"
757,"EAPOL","00:11:5B:84:DE:15 <=> 01:80:C2:00:00:03","N/A","N/A","13:10:54,868384","1460"

ARP-Spoofing Prevention в этих прошивках есть ? Где можно найти мануал к ней ?

На линках убрал safe_guard_engine (3526) - стоят нормально, до этого падали итерфейсы управления намертво. Теперь выключил туже фичу на 3627G... посмотрим что будет. Есть предположение что просто не вывозит 3627.

Рад слышать! Я Вам прошивки выслал. ARP Spoofing есть в DES-35XX. Описание в последнем мануале R5.1 на ftp. По поводу DGS-36XX какой у Вас обычно размер IPFDB и ARP таблицы?