Chapter 12
| Security Measures
IP Source Guard
If there is an entry with the same VLAN ID and MAC address, and the type of
■
the entry is dynamic DHCP snooping binding, then the new entry will
replace the old one and the entry type will be changed to static IP source
guard binding.
Only unicast addresses are accepted for static bindings.
■
Parameters
These parameters are displayed:
Add
◆
Port – The port to which a static entry is bound.
◆
VLAN – ID of a configured VLAN (Range: 1-4093)
◆
MAC Address – A valid unicast MAC address.
◆
IP Address – A valid unicast IP address, including classful types A, B or C.
Show
◆
VLAN – VLAN to which this entry is bound.
◆
MAC Address – Physical address associated with the entry.
◆
Interface – The port to which this entry is bound.
◆
IP Address – IP address corresponding to the client.
◆
Lease Time – The time for which this IP address is leased to the client. (This
value is zero for all static addresses.)
Web Interface
To configure static bindings for IP Source Guard:
1.
Click Security, IP Source Guard, Static Configuration.
2.
Select Add from the Action list.
3.
Enter the required bindings for each port.
4.
Click Apply
– 336 –