HP 3600 v2 Series Security Configuration Guide

316
Dynamic IP source guard binding entries
Dynamic IP source guard entries are generated dynamically according to client entries on the DHCP
snooping or DHCP relay agent device. They are suitable for scenarios where many hosts reside on a LAN
and obtain IP addresses through DHCP. Once DHCP allocates an IP address to a client, IP source guard
automatically adds the client entry to allow the client to access the network. A user using an IP address
not obtained through DHCP cannot access the network. Dynamic IPv6 source guard entries can also be
obtained from client entries on the ND snooping device.
• Dynamic IPv4 source guard binding entries are generated dynamically based on DHCP snooping
or DHCP relay entries to filter incoming IPv4 packets on a port.
• Dynamic IPv6 source guard binding entries are generated dynamically based on DHCPv6
snooping or ND snooping entries to filter incoming IPv6 packets on a port.
NOTE:
For information about DHCP snooping, DHCP relay, DHCPv6 snooping, and ND snooping, see
Layer
3—IP Services Configuration Guide
.
IP source guard configuration task list
Complete the following tasks to configure IPv4 source guard binding:
Task Remarks
Configuring IPv4 source guard on a port Required
Configuring a static IPv4 source guard binding entry Optional
Setting the maximum number of IPv4 source guard binding entries Optional
Complete the following tasks to configure IPv6 source guard binding:
Task Remarks
Configuring IPv6 source guard on a port Required
Configuring a static IPv6 source guard binding entry Optional
Setting the maximum number of IPv6 source guard binding entries Optional
Configuring the IPv4 source guard function
You cannot configure the IPv4 source guard function on a port in an aggregation group or a service
loopback
g
roup, nor can you add a port confi
g
ured with IP source
g
uard to an a
gg
re
g
ation
g
roup or a
service loopback group.
Configuring IPv4 source guard on a port
The IPv4 source guard function must be configured on a port before the port can obtain dynamic IPv4
source guard binding entries and use static and dynamic IPv4 source guard entries to filter packets.
• For how to configure a static binding entry, see “Configuring a static IPv4 source guard binding
entry.”

HP 3600 v2 Series Specifications

General

Brand	HP
Model	3600 v2 Series
Category	Switch
Language	English