29. IP Source Address Verify Commands
250
29.IP Source Address Verify Commands
29.1. config ip_verify_source ports
Description
This command is used to configure the per port state of IPSG on the Switching Hub. If
a port has been configured as group member of an aggregated link, then the IPSG
function cannot be enabled. When the IPSG is enabled on the port, all IP packets will
be checked. The legal IP packets will be forwarded, while the illegal IP packets will be
dropped. All non-IP packets (L2 packets, ARP, etc.) will be forwarded by default.
Format
config ip_verify_source ports [<portlist>| all] state [enable | disable]
Parameters
Restrictions
Only Administrator, Operator and Power-User level users can issue this command.
config ip_verify_source ports [<portlist>| all] state [enable | disable]
config arp_inspection ports [<portlist>| all] state [enable | disable]
create ip_source_binding ipaddress [<ipaddr>mac_address<macaddr> port <port>]
delete ip_source_binding [ipaddress<ipaddr>mac_address<macaddr>| all]
config ip_source_binding ipaddress [<ipaddr>mac_address<macaddr> port <port>]
show ip_source_binding [all | ipaddress<ipaddr>mac_address<macaddr>]
show ip_verify_source { ports {<portlist>} }
enable dhcp_snoop
disable dhcp_snoop
clear dhcp_snoop binding_entry ports [<portlist>|all]
show dhcp_snoop {[max_entry {ports <portlist>} | binding_entry {port <port>}]}
config dhcp_snoopmax_entry ports [<portlist> | all] limit [<value 1-n> | no_limit]
enable ip_verify_source log
disable ip_verify_source log
state
enable
Enable the IPSG function. The legal IP packets will be forwarded, while the illegal IP
packets will be dropped.
disable
Disable the IPSG function. The default value is disable.
Summary of Contents for ZEQUO 2200
Page 3: ...3 ...
Page 86: ...7 ARP Commands 86 ...
Page 93: ...9 Auto Configuration Commands 93 ...
Page 273: ...30 IPv6 NDP Commands 273 ...
Page 330: ...36 LLDP Commands 330 ...
Page 361: ...39 MAC based Access Control Commands 361 ...
Page 461: ...49 Protocol VLAN Commands 461 ...
Page 483: ...50 QoS Commands 483 ...
Page 504: ...53 SNMPv1 v2 v3 Commands 504 Only Administrator level users can issue this command ...
Page 523: ...53 SNMPv1 v2 v3 Commands 523 ...
Page 562: ...57 Subnet VLAN Commands 562 ...