12-3 IP Source Guard
The IP Source Guard security feature restricts IP traffic on untrusted Layer 2 ports by filtering traffic
based on the DHCP snooping binding database or manually configured IP source bindings. This feature
helps prevent IP spoofing attacks.
12-3.1 Configuration
Navigate to Security > IP Source Guard > Configuration to configure IP Source Guard mode and port
mode settings and the max dynamic clients.
IP Source Guard Configuration parameters:
Mode: Select the global mode (on or off). The default is off.
Port: A row for configuring each port.
Mode: Select the mode for each port (Enabled or Disabled). The default is Disabled.
Max Dynamic Clients: At the dropdown select 0, 1, 2 or Unlimited. The default is Unlimited.