Limits And Restrictions; Enabling Ip Source Guard - Dell PowerConnect B-RX Configuration Manual

By default, if the IP source guard is enabled without any IP source binding on the port, an ACL that
denies all IP traffic is loaded on the port. Similarly, when the IP source guard is disabled, any IP
source per-port IP ACL will be removed from the interface.

Limits and restrictions

Current implementation with this feature has the following limitations:
•
•
•

Enabling IP source guard

DHCP Snooping should be configured before you enable the IP source guard feature.
The default setting is disabled. To enable IP source guard on an untrusted port, enter the following
commands.
BigIron RX(config)# interface ethernet 1/4
BigIron RX(config-if-e10000-1/4)# source guard enable
The commands change the CLI to the interface configuration level for port 1/4 and enable IP
source guard on the port.
Syntax: [no] source guard enable
Displaying learned IP addresses
To display all IP source bindings configured on all interfaces on a switch, enter a command such as
the following.
BigIron RX#show ip source guard eth 5/20
IP source guard on ethernet 5/20: Enabled
Syntax: show ip source guard ethernet <port-num>
BigIron RX Series Configuration Guide
53-1001986-01
Works only on routing and virtual interface ports, and does not support Layer 2 switching-only
ports in VLANs without an assigned IP address on the router.
Does not support auto-saving of the learnt ARP entries when DAI is enabled. You must
manually save the ARP entries before a reboot.
Does not provide CLI to disable check for source MAC and source IP in DAI.
35
IP source guard
993