ip source-guard enable
This command enables IP Source Guard.
The negative form of the command disables IP Source Guard.
Syntax
[no] ip source-guard enable
Parameters
The command contains no arguments.
Command mode
CONFIG
Example
ma4000(config)# ip source-guard enable
ip source-guard mode
This command selects the IP Source Guard operation mode.
The negative form of the command sets the default value of the parameter.
Syntax
ip source-guard mode <MODE>
Parameters
<MODE> – IP Source Guard operation mode:
- dynamic – IP Source Guard dynamic mode;
- static – IP Source Guard static mode.
Command mode
CONFIG
Example
ma4000(config)# ip source-guard mode dynamic
ip source-guard bind
This command creates a static binding of the sender IP address to the MAC address and service on ONT.
Syntax
ip source-guard bind ip <IP> mac <MAC> interface-ont <INTERFACE> service <NUM>
Parameters
<IP> – IP addres in the format of XXX.XXX.XXX.XXX
<MAC> – MAC address in the format of XX:XX:XX:XX:XX:XX
<INTERFACE> – ONT interface: SLOT/PORT/ONTID:
- SLOT – slot number or range {slot or slot, slot or slot – slot or slot, slot – slot or slot – slot, slot – slot} (0..15);
- PORT – number or port range of GPON port on the line card {port or port, port or port – port or port, port – port or port – port, port – port} (0..7);
- ONTID – ONT number or number range {ONTID or ONTID, ONTID or ONTID – ONTID or ONTID, ONTID – ONTID or ONTID – ONTID, ONTID – ONTID} (0..63).
<NUM> - number of service on ONT, 0-7
Command mode
CONFIG
Example
ip source-guard bind ip 192.168.10.5 mac AA:BB:CC:DD:EE:FF interface-ont 0/0/0 service 2
no ip source-guard bind
This command deletes a static binding entry for a specified IP address.
Syntax
ip source-guard bind ip <IP>
Parameters
<IP> - IP address in format of XXX.XXX.XXX.XXX
Command mode
CONFIG
Example
ma4000(config)# no ip source-guard bind ip 192.168.10.5
ip source-guard ignore-vlan
This command ignores the specified vlan by the ip source-guard mechanism.
Syntax
[no] ip source-guard ignore-vlan <VID>
Parameters
<VID> – VLAN ID, may take values [1 .. 4094].
Command mode
CONFIG
Example
ma4000(config)# ip source-guard ignore-vlan 2000
show slot <SLOT> ip source-guard
This command is used to view the mapping table.
Syntax
show slot <SLOT> ip source-guard
Parameters
<SLOT> – PLC8 module number, may take values (0..15). You may specify the list of numbers using comma ( , ) or specify the range using hyphen ( - ).
Command mode
ROOT
Example
ma4000# show slot 0 ip source-guard IP Source Guard: Enabled: true Mode: dynamic Bind [0]: Ip: 192.168.10.5 Mac: AA:BB:CC:DD:EE:FF Interface-ont: 0/0/0 Service: 2