This command enables IP Source Guard.
The negative form of the command disables IP Source Guard.
[no] ip source-guard enable
The command contains no arguments.
CONFIG
ma4000(config)# ip source-guard enable |
This command selects the IP Source Guard operation mode.
The negative form of the command sets the default value of the parameter.
ip source-guard mode <MODE>
<MODE> – IP Source Guard operation mode:
CONFIG
ma4000(config)# ip source-guard mode dynamic |
This command creates a static binding of the sender IP address to the MAC address and service on ONT.
ip source-guard bind ip <IP> mac <MAC> interface-ont <INTERFACE> service <NUM>
<IP> – IP addres in the format of XXX.XXX.XXX.XXX
<MAC> – MAC address in the format of XX:XX:XX:XX:XX:XX
<INTERFACE> – ONT interface: SLOT/PORT/ONTID:
<NUM> - number of service on ONT, 0-7
CONFIG
ip source-guard bind ip 192.168.10.5 mac AA:BB:CC:DD:EE:FF interface-ont 0/0/0 service 2 |
This command deletes a static binding entry for a specified IP address.
ip source-guard bind ip <IP>
<IP> - IP address in format of XXX.XXX.XXX.XXX
CONFIG
ma4000(config)# no ip source-guard bind ip 192.168.10.5 |
This command ignores the specified vlan by the ip source-guard mechanism.
[no] ip source-guard ignore-vlan <VID>
<VID> – VLAN ID, may take values [1 .. 4094].
CONFIG
ma4000(config)# ip source-guard ignore-vlan 2000 |
This command is used to view the mapping table.
show slot <SLOT> ip source-guard
<SLOT> – PLC8 module number, may take values (0..15). You may specify the list of numbers using comma ( , ) or specify the range using hyphen ( - ).
ROOT
ma4000# show slot 0 ip source-guard IP Source Guard: Enabled: true Mode: dynamic Bind [0]: Ip: 192.168.10.5 Mac: AA:BB:CC:DD:EE:FF Interface-ont: 0/0/0 Service: 2 |