XGS4700-48F User’s Guide
261
C
H A P T E R
2 6
IP Source Guard
Use IP source guard to filter unauthorized DHCP and ARP packets in your network.
26.1 IP Source Guard Overview
IP source guard uses a binding table to distinguish between authorized and
unauthorized DHCP and ARP packets in your network. A binding contains these
key attributes:
• MAC address
• VLAN ID
• IP address
• Port number
When the Switch receives a DHCP or ARP packet, it looks up the appropriate MAC
address, VLAN ID, IP address, and port number in the binding table. If there is a
binding, the Switch forwards the packet. If there is not a binding, the Switch
discards the packet.
The Switch builds the binding table by snooping DHCP packets (dynamic bindings)
and from information provided manually by administrators (static bindings).
IP source guard consists of the following features:
• Static bindings. Use this to create static bindings in the binding table.
• DHCP snooping. Use this to filter unauthorized DHCP packets on the network
and to build the binding table dynamically.
• ARP inspection. Use this to filter unauthorized ARP packets on the network.
If you want to use dynamic bindings to filter unauthorized ARP packets (typical
implementation), you have to enable DHCP snooping before you enable ARP
inspection.
Summary of Contents for XGS4700 Series
Page 2: ......
Page 8: ...Safety Warnings XGS4700 48F User s Guide 8...
Page 24: ...Table of Contents XGS4700 48F User s Guide 24...
Page 25: ...25 PART I User s Guide...
Page 26: ...26...
Page 32: ...Chapter 1 Getting to Know Your Switch XGS4700 48F User s Guide 32...
Page 54: ...Chapter 3 Hardware Overview XGS4700 48F User s Guide 54...
Page 97: ...97 PART II Technical Reference...
Page 98: ...98...
Page 104: ...Chapter 7 System Status and Port Statistics XGS4700 48F User s Guide 104...
Page 118: ...Chapter 8 Basic Setting XGS4700 48F User s Guide 118...
Page 138: ...Chapter 9 VLAN XGS4700 48F User s Guide 138...
Page 142: ...Chapter 10 Static MAC Forward Setup XGS4700 48F User s Guide 142...
Page 174: ...Chapter 14 Bandwidth Control XGS4700 48F User s Guide 174...
Page 188: ...Chapter 17 Link Aggregation XGS4700 48F User s Guide 188...
Page 198: ...Chapter 18 Port Authentication XGS4700 48F User s Guide 198...
Page 216: ...Chapter 21 Policy Rule XGS4700 48F User s Guide 216...
Page 260: ...Chapter 25 AAA XGS4700 48F User s Guide 260...
Page 284: ...Chapter 26 IP Source Guard XGS4700 48F User s Guide 284...
Page 316: ...Chapter 32 Error Disable XGS4700 48F User s Guide 316...
Page 320: ...Chapter 33 Static Route XGS4700 48F User s Guide 320...
Page 328: ...Chapter 35 RIP XGS4700 48F User s Guide 328...
Page 384: ...Chapter 42 ARP Learning XGS4700 48F User s Guide 384...
Page 420: ...Chapter 45 Access Control XGS4700 48F User s Guide 420...
Page 426: ...Chapter 47 Syslog XGS4700 48F User s Guide 426...
Page 434: ...Chapter 48 Cluster Management XGS4700 48F User s Guide 434...
Page 438: ...Chapter 49 MAC Table XGS4700 48F User s Guide 438...
Page 442: ...Chapter 50 IP Table XGS4700 48F User s Guide 442...
Page 446: ...Chapter 52 Routing Table XGS4700 48F User s Guide 446...
Page 454: ...Chapter 54 Troubleshooting XGS4700 48F User s Guide 454...
Page 464: ...Chapter 55 Product Specifications XGS4700 48F User s Guide 464...
Page 473: ...Appendix B Legal Information XGS4700 48F User s Guide 473...
Page 474: ...Appendix B Legal Information XGS4700 48F User s Guide 474...