Cisco 500 series Administration Manual page 339

Configuring Security
IP Source Guard
STEP 6
STEP 1
STEP 2
STEP 1
STEP 2
STEP 3
STEP 4
Cisco 500 Series Stackable Managed Switch Administration Guide
View entries to the Binding database in the Security > IP Source Guard > Binding
Database page.
Enabling IP Source Guard
To enable IP Source Guard globally:
Click Security > IP Source Guard > Properties. The Properties page is
displayed.
Select Enable to enable IP Source Guard globally.
Configuring IP Source Guard on Interfaces
If IP Source Guard is enabled on an untrusted port/LAG, DHCP packets, allowed
by DHCP Snooping, are transmitted. If source IP address filtering is enabled,
packet transmission is permitted as follows:
• IPv4 traffic — Only IPv4 traffic with a source IP address that is associated
with the specific port is permitted.
• Non IPv4 traffic — All non-IPv4 traffic is permitted.
See Interactions with Other Features
Source Guard on interfaces.
To configure IP Source Guard on interfaces:
Click Security > IP Source Guard > Interface Settings. The Interface Settings
page is displayed.
Select port/LAG from the Filter field and click Go. The ports/LAGs on this unit are
displayed along with the following:
• IP Source Guard —Indicates whether IP Source Guard is enabled on the
port.
• DHCP Snooping Trusted Interface—Indicates whether this is a DHCP trusted
interface.
Select the port/LAG and click Edit. The Edit Interface Settings page is displayed.
Select Enable in the IP Source Guard field to enable IP Source Guard on the
interface.
Click Apply to copy the setting to the Running Configuration file.
for more information about enabling IP
18
339