Ip Source Guard - Planet GS-4210-16T2S User Manual

4.9.5 IP Source Guard

IP Source Guard is a secure feature used to restrict IP traffic on DHCP snooping untrusted ports by filtering traffic based on the
DHCP Snooping Table or manually configured IP Source Bindings. It helps prevent IP spoofing attacks when a host tries to
spoof and use the IP address of another host.
After receiving a packet, the port looks up the key attributes (including IP address, MAC address and VLAN tag) of the packet in
the binding entries of the IP source guard. If there is a matching entry, the port will forward the packet. Otherwise, the port will
abandon the packet.
IP source guard filters packets based on the following types of binding entries:
IP-port binding entry

MAC-port binding entry

IP-MAC-port binding entry

User's Manual of GS-4210-16T2S_24T2S_16P2S_24P2S_48T4S
278