Chapter4ServiceConguration
CommandMode
Globalcongurationmode
Syntax
setdhcpip-source-guard{{add|delete}port<portlist>|quota<0-400>}
Parameters
ParameterDescription
addEnablestheip-source-guardfunction.
deleteDisablestheip-source-guardfunction.
<portlist>Portlist.
quotaQuotaofsourceaddresses.
<0-400>
Thevalue0meansnolimit.ThesourceIPaddressesinclude
IPv4addressesandIPv6addresses.
Guidelines
Aftertheip-source-guardfunctionisenabled,bylisteningtheinteractionsbetweenthe
clientandserver,theIPaddressesallocatedbytheservertotheclientarerecordedand
themessageswithothersourceIPaddressesarelteredtopreventspoong.
Beforeenablingtheip-source-guardfunction,youmustenabletheDHCPsnooping
function.
Example
Thefollowingexampleenablestheip-source-guardfunctionforports9and10:
zte(cfg)#setdhcpip-source-guardaddport9-10
Failtoenableipsourceguardonport9.
%DHCPsnoopingisdisabledonthisport(0x40000cea)
zte(cfg)#setdhcpsnoopingaddport9
zte(cfg)#setdhcpip-source-guardaddport9-10
4.25.6setdhcpsnoopingbind-entrymacipvlanport
Purpose
Thiscommandaddsthestaticuserinformationbindingentry.
CommandMode
Globalcongurationmode
4-433
SJ-20130731155059-003|2013-11-27(R1.0)ZTEProprietaryandCondential