Ip Source Guard; Figure 3-88. Vlan Settings Page - Alcatel OS-LS-6224 User Manual

3
Configuring the Switch
• Remove — Removes the entry. The possible field values are:
• Checked — Removes the selected entry.
• Unchecked — Maintains the current entry information.
Web – Click Security, DHCP Snooping, ARP Inspection, VLAN Settings. Define the
fields and click Apply.

IP Source Guard

IP Source Guard is a security feature that restricts the client IP traffic to those source
IP addresses configured in the binding. IP traffic restrictions are applied according to
definitions in both the DHCP Snooping Binding Database and in manually
configured IP source bindings. For example, IP Source Guard can help prevent
traffic attacks caused when a host tries to use the IP address of its neighbor.
Notes: 1. IP Source Guard must be enabled globally in the IP Source Guard Properties
Page before it can be enabled on the device interfaces.
2.
IP Source Guard uses Ternary Content Addressable Memory (TCAM)
resources, requiring use of 1 TCAM rule per 1 IP Source Guard address
entry. If the number of IP Source Guard entries exceeds the number of
available TCAM rules, new IP source guard addresses remain inactive.
3. IP Source Guard can be enabled only on DHCP Snooping untrusted
interfaces.
4.
IP Source Guard cannot be configured on routed ports.
5.
If IP Source Guard and MAC address filtering is enabled on a port, Port
Security cannot be activated on the same port.
182

Figure 3-88. VLAN Settings Page