Supermicro SSE-G2252, User Manual

Page: 857 / 1401

Chapter 24: General Security Measures
IPv4 Source Guard
– 868 –
E
XAMPLE
This command sets the binding table mode for the specified interface to
MAC mode:
Console(config)#interface ethernet 1/5
Console(config-if)#ip source-guard mode mac
Console(config-if)#
clear ip
source-guard
binding blocked
This command remove all blocked records.
S
YNTAX
clear ip source-guard binding blocked
C
OMMAND
M
ODE
Privileged Exec
C
OMMAND
U
SAGE
When IP Source-Guard detects an invalid packet it creates a blocked
record. These records can be viewed using the show ip source-guard
binding blocked command. A maximum of 512 blocked records can be
stored before the switch overwrites the oldest record with new blocked
records. Use the clear ip source-guard binding blocked command to
clear this table.
E
XAMPLE
This command clears the blocked record table.
Console(config)#clear ip source-guard binding blocked
Console(config)#
show ip
source-guard
This command shows whether source guard is enabled or disabled on each
interface.
C
OMMAND
M
ODE
Privileged Exec
E
XAMPLE
Console#show ip source-guard
ACL Table MAC Table
Interface Filter-type Filter-table Max-binding Max-binding
--------- ----------- ------------ ----------- -----------
Eth 1/1 DISABLED ACL 5 1024
Eth 1/2 DISABLED ACL 5 1024
Eth 1/3 DISABLED ACL 5 1024
Eth 1/4 DISABLED ACL 5 1024
Eth 1/5 DISABLED ACL 5 1024
.