Ip Source Guard Configuration - i3 International Cortex S243 User Manual

DMAC Filter
DMAC Value

IP Source Guard Configuration

This section describes how to configure the IP Source Guard.
To configure an IP Source Guard in the web interface:
• Click Configuration / Security / Network / IP Source Guard / Configuration
• Select Enabled in the Mode field.
• Select Enabled for the specific port number.
• Select the Maximum Dynamic Clients (0, 1, 2, unlimited) for the specific port number.
• Click Apply and click the Save icon in the upper right corner to save the settings or click Reset to cancel. The
Form will return to the previously saved settings.
Access Control List Configuration Parameters:
Items
Mode of IP Source Guard
Configuration
Port Mode Configuration
Max Dynamic Clients
Specify the destination MAC filter for this ACE.
Any: No DMAC filter is specified. (DMAC filter status is "don't-care".) MC: Frame must be
multicast.
BC: Frame must be broadcast. UC: Frame must be unicast.
Specific: To filter a specific destination MAC address with this ACE, choose this value. A field
for entering a DMAC value appears.
When "Specific" is selected for the DMAC filter, you can enter a specific destination MAC
address. The legal format is "xx-xx-xx-xx-xx-xx" or "xx.xx.xx.xx.xx.xx" or "xxxxxxxxxxxx" (x is
a hexadecimal digit). A frame that hits this ACE matches this DMAC value.
Description
Enable or Disable the global IP Source Guard. All configured ACEs will be lost when the mode
is enabled.
Specify IP Source Guard is enabled on which ports. Only when both Global Mode and Port
Mode on a given port are enabled, IP Source Guard is enabled on this given port.
Specify the maximum number of dynamic clients that can be learned on given port. This
value can be 0, 1, 2 or unlimited. If the port mode is enabled and the value of max dynamic
client is equal to 0, it means only allow the IP packets forwarding that are matched in static
entries on the specific port.
58