Configuring The Ipv4 Source Guard Feature; Configuring Ipv4 Source Guard On An Interface - HP 3600 v2 Series Configuration Manual

Task

Configuring IPv4 source guard on an interface

Configuring a static IPv4 source guard binding entry
Setting the maximum number of IPv4 source guard binding entries
Complete the following tasks to configure IPv6 source guard:
Task
Configuring IPv6 source guard on an interface
Configuring a static IPv6 source guard binding entry
Setting the maximum number of IPv6 source guard binding entries

Configuring the IPv4 source guard feature

You cannot enable IPv4 source guard on a link aggregation member port or a service loopback group.
If IPv4 source guard is enabled on a port, you cannot assign the port to a link aggregation group or a
service loopback group.
Configuring IPv4 source guard on an interface
The IPv4 source guard feature must be configured on an interface before the interface can obtain
dynamic IPv4 source guard binding entries and use static and dynamic IPv4 source guard binding
entries to filter packets.
For how to configure a static binding entry, see
•
entry."
On a Layer 2 Ethernet port, IP source guard can cooperate with DHCP snooping and 802.1X to
•
generate IP source guard binding entries.
On a VLAN interface, IP source guard can cooperate with DHCP relay to generate IP source guard
•
binding entries.
Dynamic IPv4 source guard binding entries can contain such information as the MAC address, IP
address, VLAN tag, ingress port information, and entry type (DHCP snooping or DHCP relay), where the
MAC address, IP address, or VLAN tag information might not be included depending on your
configuration. IP source guard applies these entries to the interface to filter packets.
To generate IPv4 binding entries dynamically based on DHCP entries, make sure that DHCP snooping or
DHCP relay is configured and operating correctly. For information about DHCP snooping configuration
and DHCP relay configuration, see Layer 3—IP Services Configuration Guide.
If you configure the IPv4 source guard feature multiple times on an interface, only the most recent
configuration takes effect.
To configure the IPv4 source guard feature on an interface:
Step
1. Enter system view.
"Configuring a static IPv4 source guard binding
Command
system-view
356
Remarks
Required
Optional
Optional
Remarks
Required
Optional
Optional
Remarks
N/A