LevelOne GEL-5261, User Manual

Page: 321 / 570

Chapter 12
| Security Measures
IPv4 Source Guard
– 321 –
◆ When source guard is enabled, traffic is filtered based upon dynamic entries
learned via DHCP snooping, or static addresses configured in the source guard
binding table.
◆ An entry with same MAC address and a different VLAN ID cannot be added to
the binding table.
◆ Static bindings are processed as follows:
■
A valid static IP source guard entry will be added to the binding table in
ACL mode if one of the following conditions is true:
■
If there is no entry with the same VLAN ID and MAC address, a new
entry is added to the binding table using the type “static IP source
guard binding.”
■
If there is an entry with the same VLAN ID and MAC address, and the
type of entry is static IP source guard binding, then the new entry will
replace the old one.
■
If there is an entry with the same VLAN ID and MAC address, and the
type of the entry is dynamic DHCP snooping binding, then the new
entry will replace the old one and the entry type will be changed to
static IP source guard binding.
■
A valid static IP source guard entry will be added to the binding table in
MAC mode if one of the following conditions are true:
■
If there is no binding entry with the same IP address and MAC address,
a new entry will be added to the binding table using the type of static IP
source guard binding entry.
■
If there is a binding entry with same IP address and MAC address, then
the new entry shall replace the old one.
■
Only unicast addresses are accepted for static bindings.
Parameters
These parameters are displayed:
Add – Configure ACL Table
◆ Port – The port to which a static entry is bound.
◆ VLAN – ID of a configured VLAN (Range: 1-4094)
◆ MAC Address – A valid unicast MAC address.
◆ IP Address – A valid unicast IP address, including classful types A, B or C.
Add – Configure MAC Table
◆ MAC Address – A valid unicast MAC address.