Security
IP Source Guard
351 Cisco Small Business 300 Series Managed Switch Administration Guide
17
STEP 5 Enable IP Source G uard on t he untru sted inte rfaces as requi red in th e Securi ty > IP
Source Guard > Interface Settings page.
STEP 6 View entries to the Binding database in the Security > IP Source Guard > Binding
Database page.
Enabling IP Source Guard
To enable IP Source Guard globally:
STEP 1 Click Security > IP Source Guard > Properties.
STEP 2 Select Enable to enable IP Source Guard globally.
Configuring IP Source Guard on Interfaces
If IP Source Guard is enabled on an untrusted port/LAG, DHCP packets, allowed
by DHCP Snooping, are transmitted. If source IP address filtering is enabled,
packet transmission is permitted as follows:
•IPv4 traffic — Only IPv4 traffic with a source IP address that is associated
with the specific port is permitted.
•Non IPv4 traffic — All non-IPv4 traffic is permitted.
See Interactions with Other Features for more i nformat ion abo ut enab ling IP
Source Guard on interfaces.
To configure IP Source Guard on interfaces:
STEP 1 Click Security > IP Source Guard > Interface Settings.
STEP 2 Select port/LAG from the Filter field and click Go. The ports/LAGs on this unit are
displayed along with the following:
•IP Source Guard —Indicates whether IP Source Guard is enabled on the
port.
•DHCP Snooping Trusted Interface—Indicates whether this is a DHCP trusted
interface.
STEP 3 Select the port/LAG and click Edit. Select Enable in the IP Source Guard field to
enable IP Source Guard on the interface.
STEP 4 Click Apply to copy the setting to the Running Configuration file.