TL-SL5428E
 
24-port 10/100Mbps + 4-port Gigabit L2 Managed Switch CLI Guide
 
74 
Chapter 14  IP Source Guard Commands 
IP Source Guard is to filter the IP packets based on the IP-MAC Binding entries. Only the packets 
matched to the IP-MAC Binding rules can be processed, which can enhance the bandwidth utility. 
ip source guard 
Description 
The ip source guard command is used to enable the IP Source Guard function 
for the specified port. To disable the IP Source Guard function, please use no ip 
source guard command. 
Syntax 
ip source guard {disable | sip | sip+mac} 
no ip source guard 
Parameter 
disable | sip | sip+mac——Security type.   
Disable indicates to disable the IP Source Guard feature for the port. 
Sip indicates that only the packets with its source IP address and port number 
matched to the IP-MAC binding rules can be processed.   
Sip_mac indicates that only the packets with its source IP address, source MAC 
address and port number matched to the IP-MAC binding rules can be 
processed.  
By default, the option is disable.   
Command Mode 
Interface Configuration Mode(interface ethernet / interface range ethernet) 
Example 
Enable the IP Source Guard function for the ports 5-10. Configure that only the 
packets with its source IP address, source MAC address and port number 
matched to the IP-MAC binding rules can be processed: 
TP-LINK(config)# interface range Ethernet 5-10 
TP-LINK(config-if)# ip source guard sip+mac