Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

delete ip-source-guard interface <interface-name> vlan <vlan-id> enable

Parameter

Parameter

Description

interface <interface-name>

Specifies an ingress interface name. The value is a physical port or a LAG port, such as ge-1/1/1, te-1/1/2, ae1.

Note:

IP source guard be enabled on a physical interface or a Link Aggregation Group (LAG) interface but cannot be enabled on the member interfaces of a LAG.

vlan <vlan-id>

Specifies a VLAN ID. The value is an integer that ranges from 1 to 4094.

  • For IP source guard static binding table, specifies the VLAN ID manually configured in IP source guard static binding table.

  • For IP source guard dynamic binding table, specifies the VLAN ID enabled DHCP snooping.

enable <true | false>

Enable or disable IP source guard function. The value could be true or false.

  • true: Enable IP source guard function.

  • false: Disable IP source guard function.

By default, IP source guard function is disabled.

Usage Guidelines

IP source guard should be enabled based on specific interfaces and VLANs. When IP source guard is enabled based on a specific interface and VLAN, all packets from that interface and VLAN will be dropped except those that match entries in the IP source guard binding table.

...