C
HAPTER
15
| Security Commands
IP Source Guard Commands
ā 382 ā
Rx Lease Active: 0 Tx Lease Active: 0
Security/Network/DHCP/Snooping>
IP SOURCE GUARD COMMANDS
This section describes the commands used to filter IP traffic on network
interfaces based on manually configured entries in the IP Source Guard
table, or dynamic entries in the DHCP Snooping table when enabled (see
"DHCP Snooping Commands" on page 379). IP Source Guard can filter
traffic on an insecure port which receives messages from outside the
network or fire wall, and therefore may be subject to traffic attacks caused
by a host trying to use the IP address of a neighbor. For more information
on how IP source guard functions, see "Configuring IP Source Guard" on
page 119.
security network ip
source guard
configuration
This command shows the configuration settings for each port, including the
administrative mode and the maximum number of clients that can learned
dynamically; and also shows entries in the IP Source Guard table.
SYNTAX
security network ip source guard configuration
EXAMPLE
Security/Network/IP/Source/Guard>configuration
IP Source guard Configuration:
==============================
IP Source Guard Mode : Enabled
Table 39: IP Source Guard Commands
Command Function
security network ip
source guard
configuration
Shows configuration settings for each port, including the
administrative mode and the maximum number of clients that can
learned dynamically; also shows entries in the IP Source Guard
table
security network ip
source guard mode
Sets the administrative mode globally for the switch
security network ip
source guard port mode
Sets the administrative mode for a port or range of ports
security network ip
source guard limit
Specifies the maximum number of dynamic clients that can be
learned on given ports
security network ip
source guard entry
Binds a static address to a port
security network ip
source guard status
Displays static and dynamic entries in the IP Source Guard table
To Next Page
