User Manual

Manage Device Security
561
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual
6. Use one of the following methods to select an interface:
• In the Go To Interface field, enter the interface in the unit/slot/port format and click on
the Go button.
• Next to the Interface column, select the check box for the port that you want to
configure, select multiple check boxes to apply the same setting to all selected
interfaces, or select the check box in the table heading to apply the same settings to
all interfaces.
7. In the IPSG Mode list, select Disable or Enable.
This sets the administrative mode of IPSG on the interface. When IPSG mode is
enabled, the sender IP address on this interface is validated against the DHCP snooping
binding database. If IPSG is enabled, packets are not forwarded if the sender IP address
is not in DHCP snooping binding database. The factory default is Disable.
8. In the IPSG Port Security list, select Disable or Enable.
This enables or disables the administrative mode of IPSG port security on the selected
interface. When this is enabled, the packets are not forwarded if the sender MAC address
is not in forwarding database (FDB) table or the DHCP snooping binding database. To
enforce filtering based on MAC address other required configurations are as follows:
• Enable port-security globally.
• Enable port-security on the interface level.
IPSG port security cannot be enabled if IPSG is disabled. The factory default is Disable.
Also, you cannot turn off IPv6SG port security while IPv6SG is enabled.
9. Click the Apply button.
The updated configuration is sent to the switch. Configuration changes take effect
immediately.