Configuring Ip Source Guard (Cli Procedure) - Dell PowerConnect J-EX4200-24T Software Manual

Configuring IP Source Guard (CLI Procedure)

You can use the IP source guard access port security feature on J-EX Series switches to
mitigate the effects of source IP address spoofing and source MAC address spoofing. If
IP source guard determines that a host connected to an access interface has sent a
packet with an invalid source IP address or source MAC address in the packet header, it
ensures that the switch does not forward the packet—that is, the packet is discarded.
You enable the IP source guard feature on VLANs. You can enable it on a specific VLAN,
on all VLANs, or on a VLAN range.
NOTE: IP source guard applies only to access interfaces and only to untrusted
interfaces. If you enable IP source guard on a VLAN that includes trunk
interfaces or an interface set to dhcp-trusted, the CLI shows an error when
you try to commit the configuration.
Before you configure IP source guard, be sure that you have:
Enabled DHCP snooping on the VLAN or VLANs on which you will configure IP source
guard. See "Enabling DHCP Snooping (CLI Procedure)" on page 2630.
Chapter 95: Configuring Port Security
2643