Netgear GSM7224v2 - 24-Port Layer 2 Managed Gigabit Switch User Manual
Chapter 6. Managing Device Security
|
503
ProSafe® Gigabit L3 Managed Stackable Switches Software Administration Manual
IP Source Guard
The IP Source Guard folder contains links to the following features:
IP Source Guard Interface Configuration
To display the IP Source Guard Interface Configuration page, click Security
Control> IP
Source Guard
Interface Configuration.
1.
Interface - Selects the interface to enable IPSG.
2.
Use IPSG Mode to enable or disable validation of Sender IP Address on this interface. If
IPSG is Enabled Packets will not be forwarded if Sender IP Address is not in DHCP
Snooping Binding database. The factory default is disabled.
IPSG is Enabled Packets will not be forwarded if Sender IP Address is not in DHCP
Snooping Binding database. The factory default is disabled.
3.
Use IPSG Port Security to enable or disables the IPSG Port Security on the selected
interface. If IPSG Port Security is enabled then the packets will not be forwarded if the
sender MAC Address is not in FDB table and it is not in DHCP snooping binding database.
To enforce filtering based on MAC address other required configurations are:
interface. If IPSG Port Security is enabled then the packets will not be forwarded if the
sender MAC Address is not in FDB table and it is not in DHCP snooping binding database.
To enforce filtering based on MAC address other required configurations are:
•
Enable port-security Globally.
•
Enable port-security on the interface level.
IPSG Port Security can't be Enabled if IPSG is Disabled. The factory default is disabled.