Cisco Systems SF300-24P Manual de usuario Pagina 368

  • Descarga
  • Añadir a mis manuales
  • Imprimir
  • Pagina
    / 483
  • Tabla de contenidos
  • MARCADORES
  • Valorado. / 5. Basado en revisión del cliente
Vista de pagina 367
Security
IP Source Guard
351 Cisco Small Business 300 Series Managed Switch Administration Guide
17
STEP 5 Enable IP Source Guard on the untrusted interfaces as required in the Security > IP
Source Guard > Interface Settings page.
STEP 6 View entries to the Binding database in the Security > IP Source Guard > Binding
Database page.
Enabling IP Source Guard
To enable IP Source Guard globally:
STEP 1 Click Security > IP Source Guard > Properties.
STEP 2 Select Enable to enable IP Source Guard globally.
Configuring IP Source Guard on Interfaces
If IP Source Guard is enabled on an untrusted port/LAG, DHCP packets, allowed
by DHCP Snooping, are transmitted. If source IP address filtering is enabled,
packet transmission is permitted as follows:
IPv4 traffic Only IPv4 traffic with a source IP address that is associated
with the specific port is permitted.
Non IPv4 traffic — All non-IPv4 traffic is permitted.
See Interactions with Other Features for more information about enabling IP
Source Guard on interfaces.
To configure IP Source Guard on interfaces:
STEP 1 Click Security > IP Source Guard > Interface Settings.
STEP 2 Select port/LAG from the Filter field and click Go. The ports/LAGs on this unit are
displayed along with the following:
IP Source Guard —Indicates whether IP Source Guard is enabled on the
port.
DHCP Snooping Trusted Interface—Indicates whether this is a DHCP trusted
interface.
STEP 3 Select the port/LAG and click Edit. Select Enable in the IP Source Guard field to
enable IP Source Guard on the interface.
STEP 4 Click Apply to copy the setting to the Running Configuration file.
Vista de pagina 367
1 2 ... 363 364 365 366 367 368 369 370 371 372 373 ... 482 483

Comentarios a estos manuales

Sin comentarios