User Manual

M4300 Intelligent Edge Series Fully Managed Stackable Switches
Manage Switch Security User Manual578
5. Use one of the following methods to select an interface:
• In the Go T
o Interface field, enter the interface in the unit/slot/port format and click on
the Go button.
• Next to the Interface column, select the check box for the port that you want to
configure, select multiple check boxes to apply the same setting to all selected
interfaces, or select the check box in the table heading to apply the same settings to
all interfaces.
6. In the IPSG Mode list, select Disable or Enable.
This sets the administrative mode of IPSG on the interface. When IPSG mode is
enabled, the sender IP address on this interface is validated against the DHCP snooping
binding database. If IPSG is enabled, packets are not forwarded if the sender IP address
is not in DHCP snooping binding database.
The factory default is Disable.
7. In the IPSG Port Security list, select Disable or Enable.
This enables or disables the administrative mode of IPSG port security on the selected
interface. When this is enabled, the packets are not forwarded if the sender MAC address
is not in forwarding database (FDB) table or the DHCP snooping binding database.
To
enforce filtering based on MAC address other required configurations are as follows:
• Enable port-security globally
.
• Enable port-security on the interface level.
IPSG port security cannot be enabled if IPSG is disabled. The factory default is Disable.
Also, you cannot turn of
f IPv6SG port security while IPv6SG is enabled.
8. Click the Apply button.
Your settings are saved.