Raisecom ISCOM2600G-HI (A) Series User Manual

Raisecom
ISCOM2600G-HI (A) Series Configuration Guide
10 Security
Raisecom Proprietary and Confidential
Copyright © Raisecom Technology Co., Ltd.
442
Step
Command
Description
1
Raisecom#config
Enter global configuration mode.
2
Raisecom(config)#ip
verify source dhcp-
snooping
Enable IP Source Guard dynamic binding.
3
Raisecom(config)#ip
source binding dhcp-
snooping static
Translate the dynamic binding to the static
binding.
4
Raisecom(config)#ip
source binding auto-
update
(Optional) enable auto-translation. After it is
enabled, dynamic binding entries learned through
DHCP Snooping are directly translated into static
binding entries.
10.8.6 Configuring priority and rate limit of IP source guard
Configure the priority and rate limit of IP source guard for the ISCOM2600G-HI series switch
as below.
Step
Command
Description
1
Raisecom#config
Enter global configuration mode.
2
Raisecom(config)#ip verify source
[ ip-address ip-mask ] set-cos cos-
value [ rate-limit rate-value ]
Configure the priority and rate
limit of IP source guard.
10.8.7 Checking configurations
Use the following commands to check configuration results.
No.
Command
Description
1
Raisecom#show ip verify
source
Show global binding status and interface
trusted status.
2
Raisecom#show ip source
binding [ interface-type
interface-number ]
Show configurations of IP Source Guard
binding, interface trusted status, and
binding table.
3
Raisecom#show ip verify
source set-cos
Show priority configurations.
10.8.8 Example for configuring IP Source Guard
Networking requirements
As shown in Figure 10-10, to prevent IP address embezzlement, you need to configure IP
Source Guard on the Switch.

Raisecom ISCOM2600G-HI (A) Series Specifications

General

Brand	Raisecom
Model	ISCOM2600G-HI (A) Series
Category	Switch
Language	English