IP Source Guard Commands
This chapter describes the commands for IP Source Guard (IPSG):
hardware-profile filter ipsg
Use this command to enable or disable the ingress IPSG TCAM group for IPv4.
Command Syntax
hardware-profile filter ipsg (disable | enable)
Parameters
enable
Enable the ingress IPSG TCAM group
disable
Disable the ingress IPSG TCAM group
Default
N/A
Command Mode
Configure mode
Applicability
This command was introduced in OcNOS version 5.0.
Examples
#configure terminal
(config)# hardware-profile filter ipsg enable
hardware-profile filter ipsg-ipv6
Use this command to enable or disable the ingress IPSG TCAM group for IPv6.
Command Syntax
hardware-profile filter ipsg-ipv6 (disable | enable)
Parameters
enable
Enable the ingress IPSG TCAM group
disable
Disable the ingress IPSG TCAM group
Default
N/A
Command Mode
Config mode
Applicability
This command was introduced in OcNOS version 5.0.
Examples
#configure terminal
(config)# hardware-profile filter ipsg-ipv6 disable
ip verify source dhcp-snooping-vlan
Use this command to enable the IPSG feature at the interface level.
Use the no form of this command to disable the IPSG on an interface.
Command Syntax
ip verify source dhcp-snooping-vlan
no ip verify source dhcp-snooping-vlan
Parameters
None
Default
N/A
Command Mode
Interface mode
Applicability
This command was introduced in OcNOS version 5.0.
Examples
#configure terminal
(config)#interface xe1
(config-if)#ip verify source dhcp-snooping-vlan
(config-if)#no ip verify source dhcp-snooping-vlan