User Manual

Managing Device Security
455
M6100 Web Management User Guide
Click Clear to clear all interfaces statistics.
Click Update to update the page with the latest information on the switch.
IP Source Guard
The IP Source Guard link contains links to the following pages:
• IP Source Guard Interface Configuration on page 455
• IP Source Guard Binding Configuration on page 456
IP Source Guard Interface Configuration
To display the IP Source Guard Interface Configuration page, click Security  Control> IP
Source Guard
 Interface Configuration.
1. Interface - Selects the interface to enable IPSG.
2. Use IPSG Mode to enable or disable validation of Sender IP
Address on this interface. If
IPSG is enabled, Packets will not be forwarded if Sender IP Address is not in DHCP
Snooping Binding database. The factory default is disabled.
3. Use IPSG Port Security to enable or disables the IPSG Port Security on the selected
interface. If IPSG Port Security is enabled then the packets will not be forwarded if the
sender MAC
Address is not in FDB table and it is not in DHCP Snooping binding database.
To enforce filtering based on MAC address other required configurations are:
• Enable port-security globally
.
Client Ifc Mismatch The number of DHCP messages that are dropped
based on source MAC address and client HW
address verification.
DHCP Server Msgs Received
The number of Server messages that are dropped on
an untrusted port.
Field Description