Security
IP Source Guard
Cisco Sx350, SG350X, SG350XG, Sx550X & SG550XG Series Managed Switches, Firmware Release 2.2.5.x 320
16
STEP 4 Enable IP Source Guard in the (IP Source Guard) Properties page.
STEP 5 Enable IP Source Guard on the untrusted interfaces as required in the (IP Source Guard)
Interface Settings page.
STEP 6 View entries to the Binding database in the (IP Source Guard) Binding Database page.
Properties
To enable IP Source Guard globally:
STEP 1 Click Security > IP Source Guard > Properties.
STEP 2 Select Enable to enable IP Source Guard globally.
STEP 3 Click Apply to enable IP Source Guard.
Interface Settings
If IP Source Guard is enabled on an untrusted port/LAG, DHCP packets, allowed by DHCP
Snooping, are transmitted. If source IP address filtering is enabled, packet transmission is
permitted as follows:
• IPv4 traffic — Only IPv4 traffic with a source IP address that is associated with the
specific port is permitted.
• Non IPv4 traffic — All non-IPv4 traffic is permitted.
See Interactions with Other Features for more information about enabling IP Source Guard on
interfaces.
To configure IP Source Guard on interfaces:
STEP 1 Click Security > IP Source Guard > Interface Settings.
STEP 2 Select port/LAG from the Filter field and click Go. The ports/LAGs on this unit are displayed
along with the following:
• IP Source Guard —Indicates whether IP Source Guard is enabled on the port.
• DHCP Snooping Trusted Interface—Indicates whether this is a DHCP trusted
interface.
To Next Page
Loading...
Need help?
General
