IPSG

IP Source Guard (IPSG) can prevent IP address spoofing attacks.

Context

IPSG implements source IP address filtering based on Layer 2 interfaces to prevent malicious hosts from posing as authorized hosts by using authorized hosts' IP addresses. In addition, IPSG prevents unauthorized hosts from accessing or attacking networks with the IP addresses configured by themselves.

IPSG Configuration
After IPSG is configured on an interface, the switch performs IPSG check on all packets received by this interface.
Static User Binding
Static user binding entries are configured manually.
One-Click Bind
The one-click binding function creates static user binding entries based on ARP entry information.

Parent topic: Security

Huawei Proprietary and Confidential