Filter
Top Products
71
Chapter 14 IP Source Guard Commands
IP Source Guard is to filter the IP packets based on the IP-MAC Binding entries. Only the packets
matched to the IP-MAC Binding rules can be processed, which can enhance the bandwidth utility.
ip source guard
Description
The ip source guard command is used to enable the IP Source Guard function
for the specified port. To disable the IP Source Guard function, please use no ip
source guard command.
Syntax
ip source guard {disable | sip | sip+mac}
no ip source guard
Parameter
disable | sip | sip+mac——Security type.
Disable indicates to disable the IP Source Guard feature for the port.
Sip indicates that only the packets with its source IP address and port number
matched to the IP-MAC binding rules
can be processed.
Sip_mac indicates that only the packets with it
s source IP address, source MAC
address and port number matched to the IP-MAC binding rules can be
processed.
By default, the option is disabling.
Command Mode
Interface Configuration Mode（interface ethernet / interface range ethernet）
Example
Enable the IP Source Guard function for the ports 5-10. Configure that only the
packets with its source IP address, source MAC address and port number
matched to the IP-MAC binding rules can be processed:
TP-LINK(config)# interface range ethernet 5-10
TP-LINK(config-if)# ip source guard sip+mac