...
delete ip-source-guard binding ip<ip_address> [mac <mac-address> interface<interface-name>vlan <vlan-id>]
Parameter
Parameter | Description |
ip <ip_address> | Specifies a source IPv4 address for the static binding entry. The IPv4 address must be a class A, B, or C address, and cannot be 127.x.x.x, 0.0.0.0, or a multicast IP address. |
mac <mac-address> | Specifies a source MAC address for the static binding entry. The value is in the format of H:H:H:H:H:H. An H contains 2 hexadecimal numbers, and cannot be all 0s, all Fs (a broadcast address), or a multicast address. |
interface <interface-name> | Specifies ingress interface name for the static binding entry. The value is a physical port or a LAG port, such as ge-1/1/1, te-1/1/2, ae1. Note: IP source guard be enabled on a physical interface or a Link Aggregation Group (LAG) interface but cannot be enabled on the member interfaces of a LAG. |
vlan <vlan-id> | Specifies the VLAN ID. The value is an integer that ranges from 1 to 4094. |
Usage Guidelines
In IP Source Guard, static binding entries involve manually associating IP addresses with specific interfaces on a network device. IP Source Guard allows only traffic with matching source IP addresses and source MAC addresses to pass through the specified interface, thereby enhancing network security by preventing IP address spoofing attacks.
...