Loading ...
Loading ...
Loading ...
User Guide 879
Configuring IPv4 IMPB IPv4 Source Guard Configuration
Follow these steps to configure IPv4 Source Guard:
1) In the Global Config section, choose whether to enable the Log feature. Click Apply.
IPv4 Source
Guard Log
Enable or disable IPv4 Source Guard Log feature. With this feature enabled, the
switch generates a log when illegal packets are received.
2) In the Port Config section, configure the protect type for ports and click Apply.
Port Displays the port number.
Security Type Select Security Type on the port for IPv4 packets. The following options are
provided:
Disable: The IP Source Guard feature is disabled on the port.
SIP+MAC: Only the packet with its source IP address, source MAC address and
port number matching the IPv4-MAC binding rules can be processed, otherwise
the packet will be discarded.
SIP: Only the packet with its source IP address and port number matching
the IPv4-MAC binding rules can be processed, otherwise the packet will be
discarded.
Note: SIP is only available on certain devices.
LAG Displays the LAG that the port is in.
4.2 Using the CLI
4.2.1 Adding IP-MAC Binding Entries
In IPv4 Source Guard, the switch filters the packets that do not match the rules of IPv4-
MAC Binding Table. So before configuring ARP Detection, you need to complete IP-MAC
Binding configuration. For details, refer to IP-MAC Binding Configuration.
4.2.2 Configuring IPv4 Source Guard
Follow these steps to configure IPv4 Source Guard:
Step 1 configure
Enter global configuration mode.
Step 2 interface { fastEthernet
port
| range fastEthernet
port-list
|
gigabitEthernet
port
| range
gigabitEthernet
port-list
| ten-gigabitEthernet
port
| range ten-gigabitEthernet
port-list
}
Enter interface configuration mode.
Loading ...
Loading ...
Loading ...