C
HAPTER
4
| Configuring the Switch
Configuring Security
– 104 –
N
OTE
:
DHCP snooping must be enabled for dynamic clients to be learned
automatically.
◆ Port – Port identifier
◆ Mode – Enables or disables IP Source Guard on the specified ports.
Only when both Global Mode and Port Mode on a given port are
enabled, will ARP Inspection take effect on a given port.
(Default: Disabled)
◆ Max Dynamic Clients – Specifies the maximum number of dynamic
clients that can be learned on given ports. This value can be 0, 1, 2 or
unlimited. If the port mode is enabled and the maximum number of
dynamic clients is equal 0, the switch will only forward IP packets that
are matched in static entries for a given port. (Default: Unlimited)
WEB INTERFACE
To set the IP Source Guard filter for ports:
1. Click Configuration, Security, Network, IP Source Guard, Configuration.
2. Enable or disable IP Source Guard globally and for any given ports.
3. Set the maximum number of dynamic clients for any port.
4. Click Save.
Figure 34: Configuring Global and Port-based Settings for IP Source Guard