Figure 3-89. Ip Source Guard Properties Page; Defining Ip Source Guard Interface Settings - Alcatel OS-LS-6224 User Manual

Configuring IP Source Guard Properties
The IP Source Guard Properties Page allows network managers to enable the use
of IP Source Guard on the device. IP Source Guard must be enabled for the device
before it can be enabled on individual ports or LAGs.
Command Attributes
• IP Source Guard Status — Allows the use of IP Source Guard status on the
device.
• Enable — Indicates that IP Source Guard is enabled for the device.
• Disable — Indicates that IP Source Guard is disabled for the device.
Web – Click Security, DHCP Snooping, IP Source Guard, Properties. Define the
fields and click Apply.
I

Figure 3-89. IP Source Guard Properties Page

Defining IP Source Guard Interface Settings

In the IP Source Guard Interface Settings Page, IP Source Guard can be enabled on
DHCP Snooping untrusted interfaces, permitting the transmission of DHCP packets
allowed by DHCP Snooping. If source IP address filtering is enabled, packet
transmission is permitted as follows:
• IPv4 traffic — Only IPv4 traffic with a source IP address that is associated with the
specific port is permitted.
• Non IPv4 traffic — All non-IPv4 traffic is permitted.
Notes: 1. IP Source Guard must be enabled globally in the IP Source Guard Properties
Page before it can be enabled on the device interfaces.
2.
If a port is trusted, filtering of static IP addresses can be configured, although
IP Source Guard is not active in that condition.
3.
When the port's status changes from untrusted to trusted, the static IP
address filtering entries remain but become inactive.
3
IP Source Guard
183