ZXR105900/5200SeriesUserManual(BasicCongurationVolume)
IPSourceGuardConfiguration
Example
IPSourceGuardConfigurationbasedonIP
Address
InFigure36,DHCPserverconnectsgei_1/1onR1,administra-
torsetsmanagementDHCP ,gei_1/1belongstovlan100.DHCP
SnoopingfunctionisenabledinVLAN100andinterfacegei_1/1is
conguredastrusted.PCconnectsgei_1/2ofswitch,whichbe-
longstovlan100.
FIGURE36IPSOURCEGUARDCONFIGURATION
IPSourceGuardbasedonIPaddressisconguredonthegei_1/2
interfacemode.AftergettingIPaddressdynamically,PCcanonly
passthedatapacketwithsourceIPaddressthatisdistributedby
DHCPserver .
CongurationofR1:
ZXR10(config)#ipdhcpsnoopingenable
ZXR10(config)#ipdhcpsnoopingvlan100
ZXR10(config)#ipdhcpsnoopingtrustgei_1/1
XR10(config)#interfacegei_1/2
ZXR10(config-gei_1/2)#ipdhcpsnnopingip-source-guardip-base
IPSourceGuardConfigurationbasedonMAC
Address
InFigure37,DHCPserverconnectsgei_1/1onR1,administra-
torsetsmanagementDHCP ,gei_1/1belongstovlan100.DHCP
SnoopingfunctionisenabledinVLAN100andinterfacegei_1/1is
conguredastrusted.PCconnectsgei_1/2ofswitch,whichbe-
longstovlan100.
172CondentialandProprietaryInformationofZTECORPORATION