Filter
Top Products
Field Description
Interface The untrusted and snooping enabled interface for which statistics to
be displayed.
MAC Verify Failures Number of packets that were dropped by DHCP Snooping as there
is no matching DHCP Snooping binding entry found.
Client Ifc Mismatch The number of DHCP messages that are dropped based on source
MAC address and client HW address verification.
DHCP Server Msgs Received The number of Server messages that are dropped on an un trusted
port.
Managing Device Security
419
ProSafe M5300 Switch
Click CLEAR to clear all interfaces statistics.
Click REFRESH to refresh the data on the screen with the latest statistics.
IP Source Guard
The IP Source Guard (IPSG) feature helps protect the network from attacks that use IP
address spoofing to compromise or overwhelm the network. The source ID may be either the
source IP address or a {source IP address, source MAC address} pair. You can configure:
• Whether enforcement includes the source MAC address
• Static authorized source IDs
The DHCP snooping bindings database and static IPSG entries identify authorized source
IDs. IPSG can be enabled on physical and LAG ports. If you enable IPSG on a port where
DHCP snooping is disabled or where DHCP snooping is enabled but the port is trusted, all IP
traffic received on that port is dropped depending on the admin-configured IPSG entries.
The IP Source Guard folder contains links to the following features:
• IP Source Guard Interface Configuration on page 420
• IP Source Guard Binding Configuration on page 420