Table of Contents
Advertisement
4.5.8 IP Source Guard
4.5.8.1 IP Source Guard Configuration
IP Source Guard is a secure feature used to restrict IP traffic on DHCP snooping untrusted ports by filtering traffic based on
the DHCP Snooping Table or manually configured IP Source Bindings. It helps prevent IP spoofing attacks when a host tries to
spoof and use the IP address of another host. This page provides IP Source Guard related configuration. The IP Source Guard
Configuration screen in
Figure 4-5-27
The page includes the following fields:
Object
Mode of IP Source
Guard Configuration
Port Mode
Configuration
Max Dynamic Clients
Buttons
: Click to apply changes
:
Click to undo any changes made locally and revert to previously saved values.
appears.
Figure 4-5-27: IP Source Guard Configuration Screen Page Screenshot
Description
Enable the Global IP Source Guard or disable the Global IP Source Guard. All
configured ACEs will be lost when the mode is enabled.
Specify IP Source Guard is enabled on which ports. Only when both Global
Mode and Port Mode on a given port are enabled, IP Source Guard is enabled
on this given port.
Specify the maximum number of dynamic clients can be learned on given ports.
This value can be 0, 1, 2 and unlimited. If the port mode is enabled and the
value of max dynamic client is equal 0, it means only allow the IP packets
forwarding that are matched in static entries on the specific port.
: Click to translate all dynamic entries to static entries.
User's Manual of WGS-5225-8P2S Series
370
Advertisement
Table of Contents
