ZXA10 C300 Configuration Manual (CLI)
Svlan
Cvlan
-------------
300
200
– End of Steps –
14.5 Configuring the IP Source Guard
The IP source guard based on the service port prevents illegal users from accessing the
Internet.
Context
IP source guard supports IP/MAC anti-spoofing and access security management based
on the service port.
The ZXA10 C300 supports IP source guard on both IPv4 and IPv6.
l
The legal IPv4 subscribers are managed through either the DHCP snooping table or
static IP addresses.
l
The legal IPv6 subscribers are managed through either the NDP snooping/DHCPv6
snooping, or static IP addresses.
Configuration Data
lists the configuration data of the IP source guard.
Table 14-7 Configuration Data of IP Source Guard
Item
Data
Global IP source guard
Enable
Interface IP source guard
l
Interface: gpon-onu_1/5/1:2 (virtual port 1)
l
Service port: 1
l
IP source guard: enable
Maximum IP address number
l
IPv4: 2
l
IPv6: 4
IPv4 DHCP snooping static binding
IP address: 1.1.1.1
IPv6 DHCP snooping static binding
l
IPv6 address: 2001::ff01
l
IPv6-mask: 128
l
MAC address: 2365.1498.2369
Steps
1.
Enable the IP source guard function.
ZXAN(config)#ip-source-guard enable
2.
In GPON-ONU interface mode, configure the maximum IPv4 and IPv6 subscriber
binding entries on the ONU interface.
14-12
SJ-20130520164529-007|2013-06-30 (R1.0)
ZTE Proprietary and Confidential
Содержание ZXA10 C300
Страница 8: ...VI SJ 20130520164529 007 2013 06 30 R1 0 ZTE Proprietary and Confidential ...
Страница 294: ...Tables This page intentionally left blank VI SJ 20130520164529 007 2013 06 30 R1 0 ZTE Proprietary and Confidential ...
Страница 301: ...Glossary VoIP Voice over Internet Protocol XIII SJ 20130520164529 007 2013 06 30 R1 0 ZTE Proprietary and Confidential ...