Chapter 9
| General Security Measures
IPv4 Source Guard
– 303 –
ip source-guard mode
This command sets the source-guard learning mode to search for addresses in the
ACL binding table or the MAC address binding table. Use the
no
form to restore the
default setting.
Syntax
ip source-guard mode
{
acl
|
mac
}
no
ip source-guard
mode
mode
- Specifies the learning mode.
acl
- Searches for addresses in the ACL binding table.
mac
- Searches for addresses in the MAC address binding table.
Default Setting
ACL
Command Mode
Interface Configuration (Ethernet)
Command Usage
There are two modes for the filtering table:
â—†
ACL - IP traffic will be forwarded if it passes the checking process in the ACL
mode binding table.
â—†
MAC - A MAC entry will be added in MAC address table if IP traffic passes the
checking process in MAC mode binding table.
Example
This command sets the binding table mode for the specified interface to MAC
mode:
Console(config)#interface ethernet 1/5
Console(config-if)#ip source-guard mode mac
Console(config-if)#
clear ip source-guard
binding blocked
This command clears source-guard binding table entries from RAM.
Syntax
clear ip source-guard binding blocked
Command Mode
Privileged Exec
Command Usage
When IP Source-Guard detects an invalid packet it creates a blocked
record. These records can be viewed using the show ip source-guard
binding blocked command. A maximum of 512 blocked records can be
To Next Page
Loading...
Need help?
General