Ipsg Configuration Task List; Configuring The Ipv4Sg Feature; Enabling Ipv4Sg On An Interface - HP FlexFabric 5700 Series Security Configuration Manual

IPSG configuration task list

To configure IPv4SG, perform the following tasks:
Tasks at a glance
(Required.)
(Optional.)
To configure IPv6SG, perform the following tasks:
Tasks at a glance
(Required.)
(Optional.)

Configuring the IPv4SG feature

Enabling IPv4SG on an interface

When you enable IPSG on an interface, the static and dynamic IPSG are both enabled.
• Static IPv4SG uses static bindings configured by using the ip source binding command.
Dynamic IPv4SG generates dynamic bindings from related source modules. IPv4SG uses the
•
bindings to filter incoming IPv4 packets based on the matching criteria specified in the ip verify
source command.
To implement dynamic IPv4SG, make sure the DHCP snooping or DHCP relay feature operates correctly
on the network.
To enable the IPv4SG feature on an interface:
Step
1. Enter system view.
2. Enter interface view.
3. Enable the IPv4SG feature.
Enabling IPv4SG on an interface
Configuring a static IPv4SG binding
Enabling IPv6SG on an interface
Configuring a static IPv6SG binding
Command
system-view
interface interface-type
interface-number
ip verify source { ip-address |
ip-address mac-address |
mac-address }
348
Remarks
N/A
The following interface types are
supported:
•
Layer 2 Ethernet interface.
•
VLAN interface.
By default, the IPv4SG feature is
disabled on an interface.
If you configure this command on
an interface multiple times, the
most recent configuration takes
effect.