Enabling IPv4SG on an interface
About the IPv4SG feature on an interface
When you enable IPSG on an interface, the static and dynamic IPSG are both enabled.
Static IPv4SG uses static bindings configured by using the ip source binding command. For more information, see "Configuring a static IPv4SG binding."
Dynamic IPv4SG generates dynamic bindings from related source modules. IPv4SG uses the bindings to filter incoming IPv4 packets based on the matching criteria specified in the ip verify source command.
Restrictions and guidelines
To implement dynamic IPv4SG, make sure 802.1X, ARP snooping, DHCP snooping, DHCP relay agent, or DHCP server operates correctly on the network.
Procedure
Enter system view.
system-view
Enter interface view.
interface interface-type interface-number
The following interface types are supported:
Layer 2 Ethernet interface.
Layer 3 Ethernet interface.
VLAN interface.
Enable the IPv4SG feature.
ip verify source { ip-address | ip-address mac-address | mac-address }
By default, the IPv4SG feature is disabled on an interface.