Zte ZXA10 C300 - 14.5 Configuring the IP Source Guard

ZXA10C300CongurationManual(CLI)
SvlanCvlan
-------------
300200
–EndofSteps–
14.5ConguringtheIPSourceGuard
TheIPsourceguardbasedontheserviceportpreventsillegalusersfromaccessingthe
Internet.
Context
IPsourceguardsupportsIP/MACanti-spoongandaccesssecuritymanagementbased
ontheserviceport.
TheZXA10C300supportsIPsourceguardonbothIPv4andIPv6.
lThelegalIPv4subscribersaremanagedthrougheithertheDHCPsnoopingtableor
staticIPaddresses.
lThelegalIPv6subscribersaremanagedthrougheithertheNDPsnooping/DHCPv6
snooping,orstaticIPaddresses.
CongurationData
Table14-7liststhecongurationdataoftheIPsourceguard.
Table14-7CongurationDataofIPSourceGuard
ItemData
GlobalIPsourceguardEnable
InterfaceIPsourceguardlInterface:gpon-onu_1/5/1:2(virtualport1)
lServiceport:1
lIPsourceguard:enable
MaximumIPaddressnumberlIPv4:2
lIPv6:4
IPv4DHCPsnoopingstaticbindingIPaddress:1.1.1.1
IPv6DHCPsnoopingstaticbindinglIPv6address:2001::ff01
lIPv6-mask:128
lMACaddress:2365.1498.2369
Steps
1.EnabletheIPsourceguardfunction.
ZXAN(config)#ip-source-guardenable
2.InGPON-ONUinterfacemode,congurethemaximumIPv4andIPv6subscriber
bindingentriesontheONUinterface.
14-12
SJ-20130520164529-007|2013-06-30(R1.0)ZTEProprietaryandCondential