Security > Ip Source Guard > Configuration - Transition Networks SM TAT4X Series Web User Manual

Transition Networks SMxxTAT4Xx Web User Guide
Security > IP Source Guard > Configuration
This page provides IP Source Guard related configuration.
IP Source Guard is a security feature used to restrict IP traffic on DHCP snooping untrusted ports by filtering
traffic based on the DHCP Snooping Table or manually configured IP Source Bindings. It helps prevent IP spoofing
attacks when a host tries to spoof and use the IP address of another host.
Mode: Enable the Global IP Source Guard or disable the Global IP Source Guard. All configured ACEs will be lost
when the mode is enabled. The default is off (disabled).
Port Mode Configuration: Specify IP Source Guard is enabled on which ports. Only when both Global Mode and
Port Mode on a given port are enabled, IP Source Guard is enabled on this given port.
Port: The port number for this row in the table.
Mode: Enable or disable IP Source Guard on a per‐port basis.
Max Dynamic Clients: Specify the maximum number of dynamic clients that can be learned on given port.
This value can be 0, 1, 2 or unlimited. If the port mode is enabled and the value of max dynamic client is equal
to 0, it means only allow the IP packets forwarding that are matched in static entries on the specific port.
Buttons
Translate dynamic to static: : Click to translate all dynamic entries to static entries.
Apply: Click to save changes.
Reset: Click to undo any changes made locally and revert to previously saved values.
33786 Rev. A https://www.transition.com Page 182 of 340