ip-source-guard

Syntax



(ip-source-guard | no-ip-source-guard);

Hierarchy Level



[edit ethernet-switching-options
                secure-access-port
                vlan (all | vlan-name)]

Release Information

Statement introduced in JUNOS Release 9.2 for EX-series switches.

Description

Perform IP source guard checking on packets sent from access interfaces. Validate source IP addresses and source MAC addresses on all VLANs or on the specified VLAN or VLAN range. Forward packets with valid addresses and drop those with invalid addresses.

ip-source-guard—Enable IP source guard checking.
no-ip-source-guard—Disable IP source guard checking.

Default

Disabled.

Required Privilege Level

routing—To view this statement in the configuration.

routing-control—To add this statement to the configuration.