Дерево страниц
Перейти к концу метаданных
Переход к началу метаданных

ip source-guard enable

This command enables IP Source Guard.

The negative form of the command disables IP Source Guard.

Syntax     

[no] ip source-guard enable

Parameters

The command contains no arguments.

Command mode

CONFIG

Example

ma4000(config)# ip source-guard enable 

ip source-guard mode

This command selects the IP Source Guard operation mode.

The negative form of the command sets the default value of the parameter.

Syntax     

ip source-guard mode <MODE>

Parameters

<MODE> – IP Source Guard operation mode:

  • dynamic – IP Source Guard dynamic mode;
  • static – IP Source Guard static mode.

Command mode

CONFIG

Example

ma4000(config)# ip source-guard mode dynamic

ip source-guard bind

This command creates a static binding of the sender IP address to the MAC address and service on ONT.

Syntax     

ip source-guard bind ip <IP>  mac  <MAC> interface-ont  <INTERFACE> service <NUM>

Parameters

<IP> – IP addres in the format of XXX.XXX.XXX.XXX

<MAC> – MAC address in the format of XX:XX:XX:XX:XX:XX

<INTERFACE> – ONT interface:  SLOT/PORT/ONTID:

  • SLOT – slot number or range {slot or slot, slot or slot – slot or slot, slot – slot or slot – slot, slot – slot}  (0..15);
  • PORT – number or port range of GPON port on the line card {port or port, port or port – port or port, port – port or port – port, port – port} (0..7);
  • ONTID – ONT number or number range {ONTID or ONTID, ONTID or ONTID – ONTID or ONTID, ONTID – ONTID or ONTID – ONTID, ONTID – ONTID} (0..63).

<NUM> -  number of service on ONT, 0-7

Command mode

CONFIG

Example

ip source-guard bind ip 192.168.10.5 mac AA:BB:CC:DD:EE:FF interface-ont 0/0/0 service 2

no ip source-guard bind

This command deletes a static binding entry for a specified IP address.

Syntax     

ip source-guard bind ip <IP>

Parameters

<IP> - IP address in format of XXX.XXX.XXX.XXX

Command mode

CONFIG

Example

ma4000(config)# no ip source-guard bind ip 192.168.10.5

ip source-guard ignore-vlan

This command ignores the specified vlan by the ip source-guard mechanism.

Syntax     

[no] ip source-guard  ignore-vlan <VID>

Parameters

<VID> – VLAN ID, may take values [1 .. 4094].

Command mode

CONFIG

Example

ma4000(config)# ip source-guard ignore-vlan 2000

show slot <SLOT> ip source-guard

This command is used to view the mapping table.

Syntax     

show slot <SLOT> ip source-guard

Parameters

<SLOT> – PLC8 module number, may take values (0..15). You may specify the list of numbers using comma ( , ) or specify the range using hyphen ( - ).

Command mode

ROOT

Example

ma4000# show slot 0 ip source-guard 
    IP Source Guard:
        Enabled:                                       true
        Mode:                                          dynamic
        Bind [0]:
            Ip:                                        192.168.10.5
            Mac:                                       AA:BB:CC:DD:EE:FF
            Interface-ont:                             0/0/0
            Service:                                   2
  • Нет меток