Ip Source-Guard Mode; Clear Ip Source-Guard Binding Blocked - Edge-Core ECS2100-10T Reference Manual

ip source-guard mode

clear ip source-guard
binding blocked
This command sets the source-guard learning mode to search for addresses in the
ACL binding table or the MAC address binding table. Use the no form to restore the
default setting.
Syntax
ip source-guard mode {acl | mac}
no ip source-guard mode
mode - Specifies the learning mode.
acl - Searches for addresses in the ACL binding table.
mac - Searches for addresses in the MAC address binding table.
Default Setting
ACL
Command Mode
Interface Configuration (Ethernet)
Command Usage
There are two modes for the filtering table:
◆
ACL - IP traffic will be forwarded if it passes the checking process in the ACL
mode binding table.
◆
MAC - A MAC entry will be added in MAC address table if IP traffic passes the
checking process in MAC mode binding table.
Example
This command sets the binding table mode for the specified interface to MAC
mode:
Console(config)#interface ethernet 1/5
Console(config-if)#ip source-guard mode mac
Console(config-if)#
This command clears source-guard binding table entries from RAM.
Syntax

clear ip source-guard binding blocked

Command Mode
Privileged Exec
Command Usage
When IP Source-Guard detects an invalid packet it creates a blocked
record. These records can be viewed using the
binding blocked command. A maximum of 512 blocked records can be
Chapter 9
– 303 –
| General Security Measures
IPv4 Source Guard
show ip source-guard