IPSG Configuration

After IPSG is configured on an interface, the switch performs IPSG check on all packets received by this interface.

Context

IPSG checks IP packets on Layer 2 interfaces against a binding table that contains the bindings of source IP addresses, source MAC addresses, VLANs, and inbound interfaces. Only packets matching the binding table are forwarded, and other packets are discarded.

After IPSG is configured on an interface, the switch performs IPSG check on all packets received by this interface. You can specify the check items.

Procedure

Configure the IPSG function.

Choose Security > IPSG > IPSG Configuration in the navigation tree to open the IPSG Configuration page

Select an interface and click Configure to open the IPSG Configuration page

Table 1 describes the parameters on the page.

**Table 1** Configuring IPSG on interface
Parameter		Description
Interface name		Indicates the interface where the IPSG function will be configured.
IPSG status		Indicates the IPSG status on the interface, including enabled and disabled.
IPSG binding type		Indicates the IP packet check items, including: IP MAC VLAN IP+MAC IP+VLAN MAC+VLAN IP+MAC+VLAN

Set the required parameters.
Click OK to complete the configuration.

Update the IPSG information on the interface.
1. Choose Security > IPSG > IPSG Configuration in the navigation tree to open the IPSG Configuration page.
2. Click Refresh to update the IPSG information on the interface.
Query the IPSG information on the interface.
1. Choose Security > IPSG > IPSG Configuration in the navigation tree to open the IPSG Configuration page.
2. In the Query area, select an interface type and enter the interface number, and click Query.
3. Click Detail to view detailed IPSG information.