ELTEX LTP-4X, Operation Manual

Page: 95 / 199

95
Chapter 24.
IP Source Guard Configuration
Introduction
The IP Source Guard function allows restriction of unauthorised usage of IP addresses in the
network by linking IP and MAC addresses of the source to a specific service on a specific ONT.
There are two operation modes:
1) Static. To enable transmission of any traffic from clients, it is necessary to specify an
explicit match between MAC and IP addresses of client equipment.
2) Dynamic. Client equipment obtains its address via the DHCP protocol. Based on data
exchange between client equipment and the DHCP server, a DCHP snooping table is
generated on the OLT that contains MAC-IP-GEM port matches and information about
lease period. Only the packets with source MAC and source IP fields matching the records
in the DHCP snooping table are passed from the client. To support client equipment with
static IP addresses, static entries can be created in the dynamic mode.
To enable the IP Source Guard functions, enable DHCP-RA. For more information
on DHCP-RA, see Chapter 22.
These functions are not supported in Model 1 (for more information about models,
see Chapter 25).
When IP Source Guard is enabled, any non-IP traffic is forbidden.
24.1 IP Source Guard Configuration
Step 1. Switch to the configure view.
LTP-8X# configure terminal
Step 2. Enable IP Source Guard and specify the mode.
LTP-8X(config)# ip source-guard enable
LTP-8X(config)# ip source-guard mode dynamic
Step 3. Apply the changes by using the do commit command.
LTP-8X(config)# do commit