Barox RY-LGSP28-52 Series Operating Instructions Manual page 45

Once this function is switched on the configuration can be effected usin g static entries
as shown below:
The use of IP Source Guard enables the extended protection function by securing the ports by
means of the MAC and IP address. Compared to port security, where static MAC address entries
per port prevent a potential attack, IP Source Guard provides the verification of the IP address of
the connected device using static entries. The switch will block the port's network communication
where the connected device does not comply with the allocated MAC and IP address. This
means, that the attacker must know the MAC address and IP address of the device for gaining
access to the network.
IP Source Guard provides a further option for securing a DHCP servi ce, which is configured on
the switch. The DHCP snooping function is required in this deployment scenario. The function is
activated using the menu "Switch > DHCP > Snooping > Configuration". The protected clients
can be viewed using the dynamic table as shown in the following screenshot:
barox Kommunikation 45