Ruijie RG-S2900G-E Series - Page 658

Configuration Guide IP Source Guard Configuration
Ruijie(config)# [no] ip verify source
[port-security]
Enable IP Source Guard on the interface.
Use port-security to set MAC-based filtering.
The following example shows how to enable IP Source Guard on interface1:
Ruijie(config)# interface FastEthernet 0/1
Ruijie(config-if)# ip verify source
Ruijie(config-if)# end
Caution
The application of IP Source Guard is combined with DHCP Snooping.
That is to say, port-based IP Source Guard only takes effect on
untrusted port under the control of DHCP Snooping.
Configuring Static IP Source Address Binding User
By default, static binding user is not existent. In some application environment, you
may need to use static IP address to access networks, which can be implemented by
configuring static binding users.
Command
Description
Ruijie# configure terminal
Enter the global configuration mode.
Ruijie(config)# [no] ip source
binding mac-addrees vlan vlan_id
ip-address interface interface-id
Configure static binding user.
The following example shows how to add a static binding user:
Ruijie# configure terminal
Ruijie(config)# ip source binding 00d0.f801.0101 vlan 1 192.168.4.243 interface
FastEthernet 0/9
Ruijie(config)# end
Showing IP Source Guard Configuration
Showing IP Source Guard Filtering Entry
Use this command to show IP Source Guard filtering entry.
Command
Description