C
HAPTER
15
| Security Commands
IP Source Guard Commands
ā 384 ā
EXAMPLE
Security/Network/IP/Source/Guard>mode enable
Security/Network/IP/Source/Guard>
security network ip
source guard port
mode
This command enables or disables IP source guard for a port or range of
ports.
SYNTAX
security network ip source guard port mode [port-list] [enable |
disable]
port-list - A specific port or a range of ports. (Range: 1-28 or all)
enable - Enables IP Source Guard on the specified ports. Only
when both Global Mode and Port Mode on a given port are enabled,
will ARP Inspection take effect on a given port.
disable - Disables IP Source Guard on the specified ports.
DEFAULT SETTING
Disabled
EXAMPLE
Security/Network/IP/Source/Guard>port mode 2 enable
Security/Network/IP/Source/Guard>
security network ip
source guard limit
This command specifies the maximum number of dynamic clients that can
be learned on given ports.
SYNTAX
security network ip source guard limit [port-list] [dynamic-limit |
unlimited]
port-list - A specific port or a range of ports. (Range: 1-28 or all)
dynamic-limit - The maximum number of dynamic clients that can
be learned on given ports. (Range: 0, 1 or 2, where 0 means that
the switch will only forward IP packets that are matched in static
entries)
unlimited - There is no restriction on the number of dynamic
clients that can be learned on given ports.
DEFAULT SETTING
unlimited
To Next Page
