Panasonic ZEQUO 6400, Руководство по эксплуатации

Страница: 445 / 1058

39. IP Source Address Verify Commands
446
39.IP Source Address Verify Commands
39.1. config ip_verify_source ports

Description
This command is used to configure the per port state of IPSG on the Switching Hub. If
a port has been configured as group member of an aggregated link, then the IPSG
function cannot be enabled. When the IPSG is enabled on the port, all IP packets will
be checked. The legal IP packets will be forwarded, while the illegal IP packets will be
dropped. All non-IP packets (L2 packets, ARP, etc.) will be forwarded by default.

Format
config ip_verify_source ports [<portlist>| all] state [enable | disable]

Parameters
 Restrictions
Only Administrator, Operator and Power-User level users can issue this command.
config ip_verify_source ports [<portlist>| all] state [enable | disable]
config arp_inspection ports [<portlist>| all] state [enable | disable]
create ip_source_binding ipaddress [<ipaddr>mac_address<macaddr> port <port>]
delete ip_source_binding [ipaddress<ipaddr>mac_address<macaddr>| all]
config ip_source_binding ipaddress [<ipaddr>mac_address<macaddr> port <port>]
show ip_source_binding [all | ipaddress<ipaddr>mac_address<macaddr>]
show ip_verify_source { ports {<portlist>} }
enable dhcp_snoop
disable dhcp_snoop
clear dhcp_snoop binding_entry ports [<portlist>|all]
show dhcp_snoop {[max_entry {ports <portlist>} | binding_entry {port <port>}]}
config dhcp_snoopmax_entry ports [<portlist> | all] limit [<value 1-n> | no_limit]
enable ip_verify_source log
disable ip_verify_source log
state
enable
Enable the IPSG function. The legal IP packets will be forwarded, while the illegal IP
packets will be dropped.
disable
Disable the IPSG function. The default value is disable.