Edge-Core ECS4660-28F Management Manual page 1138

| General Security Measures
C 29
HAPTER
IPv4 Source Guard
ip source-guard
mode
clear ip
source-guard
binding blocked
This command sets the source-guard learning mode to search for
addresses in the ACL binding table or the MAC address binding table. Use
the no form to restore the default setting.
S
YNTAX
ip source-guard mode {acl | mac}
no ip source-guard mode
mode - Specifies the learning mode.
acl - Searches for addresses in the ACL table.
mac - Searches for addresses in the MAC address table.
D S
EFAULT ETTING
ACL
C M
OMMAND ODE
Interface Configuration (Ethernet)
E
XAMPLE
This command sets the binding table mode for the specified interface to
MAC mode:
Console(config)#interface ethernet 1/5
Console(config-if)#ip source-guard mode mac
Console(config-if)#
This command remove all blocked records.
S
YNTAX
clear ip source-guard binding blocked
C M
OMMAND ODE
Privileged Exec
C U
OMMAND SAGE
When IP Source-Guard detects an invalid packet it creates a blocked
record. These records can be viewed using the
binding blocked command. A maximum of 512 blocked records can be
stored before the switch overwrites the oldest record with new blocked
records. Use the clear ip source-guard binding blocked command to
clear this table.
– 1138 –
show ip source-guard