C
HAPTER
25
| General Security Measures
IPv4 Source Guard
– 924 –
ip source-guard
mode
This command sets the source-guard learning mode to search for
addresses in the ACL binding table or the MAC address binding table. Use
the no form to restore the default setting.
SYNTAX
ip source-guard mode {acl | mac}
no ip source-guard mode
mode - Specifies the learning mode.
acl - Searches for addresses in the ACL table.
mac - Searches for addresses in the MAC address table.
DEFAULT SETTING
ACL
COMMAND MODE
Interface Configuration (Ethernet)
EXAMPLE
This command sets the binding table mode for the specified interface to
MAC mode:
Console(config)#interface ethernet 1/5
Console(config-if)#ip source-guard mode mac
Console(config-if)#
clear ip
source-guard
binding blocked
This command remove all blocked records.
SYNTAX
clear ip source-guard binding blocked
COMMAND MODE
Privileged Exec
COMMAND USAGE
When IP Source-Guard detects an invalid packet it creates a blocked
record. These records can be viewed using the show ip source-guard
binding blocked command. A maximum of 512 blocked records can be
stored before the switch overwrites the oldest record with new blocked
records. Use the clear ip source-guard binding blocked command to
clear this table.
To Next Page
Loading...
Need help?
General
