Enabling Ip Source Guard Per-Port-Per-Vlan; Enabling Ip Source Guard On A Ve; Displaying Learned Ip Addresses - Dell PowerConnect B-FCXs Configuration Manual

The [vlan <vlannum>] parameter is optional. If you enter a VLAN number, the binding applies to
that VLAN only. If you do not enter a VLAN number, the static binding applies to all VLANs
associated with the port. Note that since static IP source bindings consume system resources, you
should avoid unnecessary bindings.

Enabling IP source guard per-port-per-VLAN

To enable IP Source Guard per-port-per VLAN, enter commands such as the following.
PowerConnect(config)#vlan 12 name vlan12
PowerConnect(config-vlan-12)#untag ethernet 5 to 8
PowerConnect(config-vlan-12)#tag ethernet 23 to 24
PowerConnect(config-vlan-12)#exit
PowerConnect(config)#int e 23
PowerConnect(config-if-e1000-23)#per-vlan vlan12
PowerConnect(config-if-e1000-23-vlan-12))#source-guard enable
The commands in this example configure port-based VLAN 12, and add ports e 5 – 8 as untagged
ports and ports e 23 – 24 as tagged ports to the VLAN. The last two commands enable IP Source
Guard on port e 23, a member of VLAN 12.
Syntax: [no] source-guard enable

Enabling IP source guard on a VE

To enable IP Source Guard on a virtual interface, enter commands such as the following.
PowerConnect(config)#vlan 2
PowerConnect(config-vlan-2)#tag e1
Added tagged port(s) ethe 1 to port-vlan 2
PowerConnect(config-vlan-2)#router-int ve 2
PowerConnect(config-vlan-2)#int ve 2
PowerConnect(config-vif-2)#source-guard enable e 1
Syntax: [no] source-guard enable

Displaying learned IP addresses

To display the learned IP addresses for IP Source Guard ports, use the CLI commands show ip
source-guard ethernet.
PowerConnect B-Series FCX Configuration Guide
53-1002266-01
39
IP source guard
1363