TP-Link T1500 Series - Example for IP Source Guard; Network Requirements; Configuration Scheme; Using the GUI

Configuration Guide 643
Configuring IPv4 IMPB Configuration Examples
5.2 Example for IP Source Guard
5.2.1 Network Requirements
As shown below, the legal host connects to the switch via port 1/0/1 and belongs to the
default VLAN 1. It is required that only the legal host can access the network via port 1/0/1,
and other unknown hosts will be blocked when trying to access the network via ports
1/0/1-3.
Figure 5-6 Network Topology
Switch
Fa1/0/2
Fa1/0/3
Fa1/0/1
Legal Host
192.168.0.100
74-D3-45-32-B5-6D
Unknown HostUnknown Host
5.2.2 Configuration Scheme
To implement this requirement, you can use IP-MAC Binding and IP Source Guard to filter
out the packets received from the unknown hosts. The overview of configuration on the
switch is as follows:
1) Bind the MAC address, IP address, connected port number and VLAN ID of the legal
host with IP-MAC Binding.
2) Enable IP Source Guard on ports 1/0/1-3.
Demonstrated with T1500-28PCT, the following sections provide configuration procedure
in two ways: using the GUI and using the CLI.
5.2.3 Using the GUI
1) Choose the menu SECURITY > IPv4 IMPB > IP-MAC Binding > Manual Binding and
click
to load the following page. Enter the host name, IP address, MAC address
and VLAN ID of the legal host, select the protect type as , and select port 1/0/1 on the
panel. Click Apply.