set ip-source-guard verify

Parameter

Description

interface <interface-name>

Specifies an ingress interface name. The value is a physical port or a LAG port, such as ge-1/1/1, te-1/1/2, ae1.

Note:

IP source guard be enabled on a physical interface or a Link Aggregation Group (LAG) interface but cannot be enabled on the member interfaces of a LAG.

vlan <vlan-id>

Specifies a VLAN ID. The value is an integer that ranges from 1 to 4094.

• For IP source guard static binding table, specifies the VLAN ID manually configured in IP source guard static binding table.

• For IP source guard dynamic binding table, specifies the VLAN ID enabled DHCP snooping.

verify <ip | ip+mac>

Specifies the filtering item based on specific interface and VLAN. The value could be ip or ip+mac.

• When “ip” is specified, enables IP Source Guard with interface + VLAN + Source IP filtering.

• When “ip+mac” is specified, enables IP Source Guard with interface + VLAN + Source IP + Source MAC address filtering.

The default value is ip, IP Source Guard filtering item is interface + VLAN + Source IP.