IP S
OURCE
G
UARD
3-237
Web – Click DHCP Snooping, DHCP Snooping Binding Information.
Figure 3-110. DHCP Snooping Binding Information
CLI – This example shows how to display the DHCP Snooping binding
table entries
.
IP Source Guard
IP Source Guard is a security feature that filters IP traffic on network
interfaces based on manually configured entries in the IP Source Guard
table, or static and dynamic entries in the DHCP Snooping table when
enabled (see “DHCP Snooping” on page 3-230). IP source guard can be
used to prevent traffic attacks caused when a host tries to use the IP
address of a neighbor to access the network. This section describes
commands used to configure IP Source Guard.
IP Source Guard Port Configuration
IP Source Guard is used to filter traffic on an unsecure port which receives
messages from outside the network or firewall, and therefore may be
subject to traffic attacks caused by a host trying to use the IP address of a
neighbor.
Console#show ip dhcp snooping binding 4-278
MacAddress IpAddress Lease(sec) Type VLAN
Interface
----------------- --------------- ---------- -------------------- ----
---------
11-22-33-44-55-66 192.168.0.99 0 Dynamic 1
Eth 1/5
Console#
To Next Page
Loading...
Need help?
General
