User Guide
650
Configuring IPv4 IMPB
IPv4 Source Guard Configuration
Follow these steps to configure IPv4 Source Guard:
1) In the
Global Config
section, choose whether to enable the Log feature. Click
Apply
.
Pv4 Source
Guard Log
Enable or disable IPv4 Source Guard Log feature. With this feature enabled, the
switch generates a log when illegal packets are received.
2) In the
Port Config
section, configure the protect type for ports and click
Apply
.
Port
Displays the port number.
Security Type
Select Security Type on the port for IPv4 packets. The following options are
provided:
Disable:
The IP Source Guard feature is disabled on the port.
SIP+MAC
: Only the packet with its source IP address, source MAC address and
port number matching the IPv4-MAC binding rules can be processed, otherwise
the packet will be discarded.
SIP
: Only the packet with its source IP address and port number matching
the IPv4-MAC binding rules can be processed, otherwise the packet will be
discarded.
LAG
Displays the LAG that the port is in.
4.2 Using the CLI
4.2.1 Adding IP-MAC Binding Entries
In IPv4 Source Guard, the switch filters the packets that do not match the rules of IPv4-
MAC Binding Table. So before configuring ARP Detection, you need to complete IP-MAC
Binding configuration. For details, refer to
4.2.2 Configuring IPv4 Source Guard
Follow these steps to configure IPv4 Source Guard:
Step 1
configure
Enter global configuration mode.
Step 2
interface { fastEthernet
port |
range fastEthernet
port-list |
gigabitEthernet
port |
range
gigabitEthernet
port-list
|
ten-gigabitEthernet
port |
range ten-gigabitEthernet
port-list
}
Enter interface configuration mode.
Downloaded from
