Configuring Ip Source Guard - Dell Networking 7048 Configuration Manual

Configuring IP Source Guard

Beginning in Privileged EXEC mode, use the following commands to
configure IPSG settings on the switch.
Command
configure
interface
interface
ip verify source [port-
security]
exit
ip verify binding
mac_addr
vlan
ipaddr
interface
exit
show ip verify interface
interface
show ip verify source
interface
[interface
show ip source binding
812
Snooping and Inspecting Traffic
Purpose
Enter global configuration mode.
Enter interface configuration mode for the specified port
or LAG. The
and number, for example gigabitethernet 1/0/3. For a
LAG, the interface type is port-channel.
You can also specify a range of ports with the interface
range command, for example, interface range
gigabitethernet 1/0/8-12 configures interfaces 8, 9, 10, 11,
and 12.
Enable IPSG on the port or LAG to prevent packet
forwarding if the source IP address in the packet is not in
the DHCP snooping binding database. Use the option
port-security keyword to also prevent packet forwarding if
the sender MAC address is not in forwarding database
table or the DHCP snooping binding database. \
NOTE:
address, port security must also be enabled on the interface
by using the port security command in Interface
Configuration mode.
Exit to Global Config mode.
Configure a static binding for IPSG.
vlan_id
interface
Exit to Privileged EXEC mode.
View IPSG parameters for a specific port or LAG. The
interface
(gigabitethernet, tengigabitethernet, or port-channel)
and number.
View IPSG bindings configured on the switch or on a
] specific port or LAG.
View IPSG bindings.
interface
variable includes the interface type
To enforce filtering based on the source MAC
parameter includes the interface type