Configure Filtered Packet Type of Port IP Source Guard
Configuration Condition
Before configuring the filtered packet type of the port IP Source Guard, first complete the following task:
- Enable the port IP Source Guard function
Configure Filtered Packet Type of Port IP Source Guard
After enabling the port IP Source Guard function, the IP packet is filtered by means of ip. When the source IP address and VLAN number of the IPv4 packet received by the port are the same as the source IP address and VLAN number in the binding entry of the port IP Source Guard, the port forwards the packet; if any one is different, drop the packet.
After enabling the port IP Source Guard function, IP packets are filtered by means of ip-mac. When the source MAC address, source IP address and VLAN number of the IP packet received by the port are the same as the MAC address, IP address and VLAN number in the binding entries of the port IP Source Guard, the port forwards the packet; if any one is different, drop the packet.
After enabling the port IP Source Guard function, IP packets are filtered by means of mac. When the source MAC address and VLAN number of the IP packet received by the port are the same as the MAC address, IP address and VLAN number in the binding entries of the port IP Source Guard, the port forwards the packet; if any one is different, drop the packet.
Table 4-4 Configure the filtered packet type of the port IP Source Guard
|
Step
|
Command
|
Description
|
|
Enter global configuration mode
|
config terminal
|
-
|
|
Enter the L2 Ethernet interface configuration mode
|
interface interface-name
|
Either
After entering the L2 Ethernet interface configuration mode, the subsequent configuration just takes effect on the current port. After entering the aggregation group configuration mode, the subsequent configuration just takes effect on the aggregation group.
|
|
Enter the aggregation group configuration mode
|
interface link-aggregation link-aggregation-id
|
|
Enable the port IP Source Guard function
|
ip verify source type {ip | ip-mac | mac}
|
Mandatory
By default, the filter mode is IP filter type, taking effect only for the dynamic entry.
|
Switch
.png){kind=icon}
.png){kind=logo}
