Huawei S1700 Series Web User Manual page 165

S1700 Managed Series Ethernet Switches
Web User Manual
Figure 9-41 IPSG Settings
Table 9-28 Parameters of IPSG Settings
Item
Query
Interface Name
Status
Matching Options
After IPSG enabled, if the interfaces do not configure any binding table, interface will prevent
all IP packets.
IPSG don‟t support DHCP snooping trust port. If DHCP snooping port trust state is enabled,
IPSG cannot be enabled, and vice versa.
IPSG don‟t support Link Aggregation. If port is the member of Link Aggregation, IPSG
cannot be enabled, and vice versa.
Configure IPSG Parameter for Interface
Step 1 Click Security> IPSG.
Step 2 Click the checkbox on the left side of IPSG parameter interface to be configured, and then
click Configure button, the configuration page is displayed as follows.
Issue 05 (2012-10-25)
Description
Search the IPSG settings of specified interface in Interface Name.
Interface Number
IPSG function status on interface.
Display the binding policy on interface. The switch will check if the
packet conforms to the binding table configured on interface
according to the Matching Options. The options are as follows:
IP:Match IP address only.
MAC: Match MAC address only.
VLAN:MatchVLAN ID only.
IP&MAC:Match IP and MAC address.
IP&VLAN:Match IP and VLAN ID.
MAC&VLAN:Match MAC address and VLAN ID.
IP&MAC&VLAN:Match IP address, MAC address, and VLAN ID.
CAUTION
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
9 Security
155