Network IP Source Guard Configuration

The IP Source Guard Configuration page provides IP Source Guard related configuration.

Figure 4-47. IP Source Guard Configuration

The IP Source Guard Configuration page has the following parameters:

  • Mode of IP Source Guard Configuration: Enable the Global IP Source Guard or disable the Global IP Source Guard. All configured ACEs are lost when the mode is enabled.
  • Port Mode Configuration: Specify IP Source Guard is enabled on which ports. Only when both Global mode and Port mode on a given port are enabled, IP Source Guard is enabled on this given port.
  • Maximum Dynamic Clients: Specify the maximum number of dynamic clients that can be learned on given port. This value can be 0, 1, 2, or unlimited. If the Port mode is enabled and the value of maximum dynamic client is equal to 0, then it means that only those IP packets allowed for forwarding that are matched in static entries on the specific port.