356
Task Remarks
Configuring IPv4 source guard on an interface Required
Configuring a static IPv4 source guard binding entry Optional
Setting the maximum number of IPv4 source guard binding entries Optional
Complete the following tasks to configure IPv6 source guard:
Task Remarks
Configuring IPv6 source guard on an interface Required
Configuring a static IPv6 source guard binding entry Optional
Setting the maximum number of IPv6 source guard binding entries Optional
Configuring the IPv4 source guard feature
You cannot enable IPv4 source guard on a link aggregation member port or a service loopback group.
If IPv4 source guard is enabled on a port, you cannot assign the port to a link aggregation group or a
service loopback group.
Configuring IPv4 source guard on an interface
The IPv4 source guard feature must be configured on an interface before the interface can obtain
dynamic IPv4 source guard binding entries and use static and dynamic IPv4 source guard binding
entries to filter packets.
• For how to configure a static binding entry, see "Configuring a static IPv4 source guard binding
entr
y."
• On a Layer 2 Ethernet port, IP source guard can cooperate with DHCP snooping and 802.1X to
generate IP source guard binding entries.
• On a VLAN interface, IP source guard can cooperate with DHCP relay to generate IP source guard
binding entries.
Dynamic IPv4 source guard binding entries can contain such information as the MAC address, IP
address, VLAN tag, ingress port information, and entry type (DHCP snooping or DHCP relay), where the
MAC address, IP address, or VLAN tag information might not be included depending on your
configuration. IP source guard applies these entries to the interface to filter packets.
To generate IPv4 binding entries dynamically based on DHCP entries, make sure that DHCP snooping or
DHCP relay is configured and operating correctly. For information about DHCP snooping configuration
and DHCP relay configuration, see Layer 3—IP Services Configuration Guide.
If you configure the IPv4 source guard feature multiple times on an interface, only the most recent
configuration takes effect.
To configure the IPv4 source guard feature on an interface:
Ste
Command
Remarks
1. Enter system view.
system-view N/A
To Next Page
Loading...
Need help?
General