Dell N3200-ON EMC Networking N-Series Switches CLI Reference Guide version 6.6 - Page 587

IP Source Guard Commands Dell EMC Networking N1100-ON/N1500/N2000/N2100-ON/N2200ON/N3000-ON/N3100-ON/N3200-ON Series Switches IP Source Guard (IPSG) is a security feature that filters IP packets based on source ID. The source ID may either be source IP address or a {source IP address, source MAC address} pair. The network administrator configures whether enforcement includes the source MAC address. The network administrator can configure static authorized source IDs. The DHCP Snooping binding database and static IPSG entries identify authorized source IDs. IPSG may be enabled on Ethernet and port-channel ports. IPSG is disabled by default. If the network administrator enables IPSG on a port where DHCP snooping is disabled or where DHCP snooping is enabled but the port is trusted, all IP traffic received on that port is dropped depending upon the adminconfigured IPSG entries. IPSG cannot be enabled on a port-based routing interface. IPSG uses two enforcement mechanisms: the L2FDB to enforce the source MAC address and ingress VLAN and an ingress classifier to enforce the source IP address or {source IP, source MAC} pair. ip verify source Use the ip verify source command in Interface Configuration mode to enable filtering of IP packets from hosts which have not been assigned an IP address via DHCP on the specified interface. Use the no form of the command to enable unverified traffic to flow over the interfaces. Syntax ip verify source {port-security} no ip verify source • port-security-Enables filtering based on IP address, VLAN, and MAC address. When not specified, filtering is based upon IP address. Layer 2 Switching Commands 587