User Guide
657
Configuring IPv4 IMPB
Configuration Examples
Interface Trust state limit Rate(pps) Current speed(pps) Burst Interval Status LAG
--------- ----------- --------------- ------------------ -------------- ------- ---
Fa1/0/1 Disable 100 0 1 --- N/A
Fa1/0/2 Disable 100 0 1 --- N/A
Fa1/0/3 Enable 100 0 1 --- N/A
...
5.2 Example for IP Source Guard
5.2.1 Network Requirements
As shown below, the legal host connects to the switch via port 1/0/1 and belongs to the
default VLAN 1. It is required that only the legal host can access the network via port 1/0/1,
and other unknown hosts will be blocked when trying to access the network via ports
1/0/1-3.
Figure 5-6
Network Topology
Switch
Fa1/0/2
Fa1/0/3
Fa1/0/1
Legal Host
192.168.0.100
74-D3-45-32-B5-6D
Unknown Host
Unknown Host
5.2.2 Configuration Scheme
To implement this requirement, you can use IP-MAC Binding and IP Source Guard to filter
out the packets received from the unknown hosts. The overview of configuration on the
switch is as follows:
1) Bind the MAC address, IP address, connected port number and VLAN ID of the legal
host with IP-MAC Binding.
2) Enable IP Source Guard on ports 1/0/1-3.
Demonstrated with T1500-28PCT, the following sections provide configuration procedure
in two ways: using the GUI and using the CLI.
Downloaded from
