4.10.2.4.1 Network IP Source Guard Configuration

The IP Source Guard Configuration page provides IP Source Guard related configuration.

Figure 4-49. IP Source Guard Configuration

The IP Source Guard Configuration page has the following parameters:

  • IP Source Guard Configuration:
    • Mode: Enables/Disables the IP Source Guard. All configured ACEs are lost when the mode is enabled.
  • Port Mode Configuration:
    • Mode: Specify IP Source Guard is enabled on which ports. Only when both Global mode and Port mode on a given port are enabled, IP Source Guard is enabled on this given port.
    • Max Dynamic Clients: Specify the maximum number of dynamic clients that can be learned on given port. This value can be 0, 1, 2, or unlimited. If the Port mode is enabled and the value of maximum dynamic client is equal to 0, then it means that only those IP packets allowed for forwarding that are matched in static entries on the specific port.