106
binding table. If no matching entry is found, the packet will be dropped.
◆ Filtering rules are implemented as follows:
■ If DHCP snooping is disabled, IP source guard will check the VLAN ID, source IP
address, and port number. If a matching entry is found in the binding table and the entry
type is static IP source guard binding, the packet will be forwarded.
■ If DHCP snooping is enabled, IP source guard will check the VLAN ID, source IP
address, and port number. If a matching entry is found in the binding table and the entry
type is static IP source guard binding, or dynamic DHCP snooping binding, the packet will
be forwarded.
■ If IP source guard if enabled on an interface for which IP source bindings have not yet
been configured (neither by static configuration in the IP source guard binding table nor
dynamically learned from DHCP snooping), the switch will drop all IP traffic on that port,
except for DHCP packets.
PARAMETERS
These parameters are displayed:
◆ Global Mode – Enables or disables IP Source Guard globally on the switch. All configured
ACEs will be lost when enabled. (Default: Disabled)
Note: DHCP snooping must be enabled for dynamic clients to be learned automatically.
◆ Port – Port identifier
◆ Mode – Enables or disables IP Source Guard on the specified ports. Only when both
Global Mode and Port Mode on a given port are enabled, the IP Source Guard takes
effect on a given port. (Default: Disabled)
◆ Max Dynamic Clients – Specifies the maximum number of dynamic clients that can be
learned on given ports. This value can be 0, 1, 2 or unlimited. If the port mode is enabled
and the maximum number of dynamic clients is equal 0, the switch will only forward IP
packets that are matched in static entries for a given port. (Default: Unlimited)
WEB INTERFACE
To set the IP Source Guard filter for ports:
1. Click Configuration, Security, Network, IP Source Guard, Configuration.
2. Enable or disable IP Source Guard globally and for any given ports.
3. Set the maximum number of dynamic clients for any port.
4. Click Save.
To Next Page
Loading...
