Dell PowerConnect J-EX4200-24T Software Manual page 2716

Dell PowerConnect J-Series Ethernet Switch Complete Software Guide for Junos OS
Related
Documentation
2644
To enable IP source guard on a VLAN, all VLANs, or a VLAN range (a series of tagged
VLANs) by using the CLI:
NOTE: Replace values displayed in italics with values for your configuration.
On a specific VLAN:
[edit ethernet-switching-options secure-access port]
user@switch#set vlan default ip-source-guard
On all VLANs:
[edit ethernet-switching-options secure-access port]
user@switch# set vlan all ip-source-guard
On a VLAN range:
Set the VLAN range (the VLAN name is
1.
[edit vlans]
user@switch# set employeevlan-range 100-101
Associate an interface with a VLAN-range number (100 in the following example)
2.
and set the port mode to
[edit interfaces]
user@switch# set ge-0/0/6 unit 0 family ethernet-switching port-mode access vlan
members100
Enable IP source guard on the VLAN
3.
[edit ethernet-switching-options secure-access port]
user@switch# set vlan employee ip-source-guard
NOTE: You can use the
guard for a specific VLAN after you have enabled the feature for all VLANs.
To view results of the configuration steps before committing the configuration, type the
command at the user prompt.
show
To commit these changes to the active configuration, type the
user prompt.
Verifying That IP Source Guard Is Working Correctly on page 2662
Example: Configuring IP Source Guard on a Data VLAN That Shares an Interface with
a Voice VLAN on page 2608
Example: Configuring IP Source Guard with Other J-EX Series Switch Features to
Mitigate Address-Spoofing Attacks on Untrusted Access Interfaces on page 2600
Understanding IP Source Guard for Port Security on J-EX Series Switches on page 2563
):
employee
access :
employee :
no-ip-source-guard statement to disable IP source
command at the
commit