Nortel 5530 Engineering Manual

Also see for 5510: Installation Configuration Specifications

Contents

Filters and QoS Configuration for ERS 5500Technical Configuration Guide v2.0 NN48500-559___________________________________________________________________________________________________________________________Nortel Confidential Information Copyright © 2008 Nortel Networks. All Rights Reserved.External Distribution 31• 5500(config)#ip arp-inspection vlan 100• 5500(config)#ip arp-inspection vlan 200• 5500(config)#interface fastEthernet 1/24• 5500(config-if)#ip arp-inspection trusted• 5500(config-if)#exit8.3 IP Source GuardIP source guard works together with the DHCP snooping binding table by providing securityagainst invalid source IP addresses. If enabled, the source IP address is checked against thesource IP address in the binding table on untrusted ports. If the incoming source IP address doesnot match the IP address in the binding table, the packet is dropped. Please note that manual(static) assignment of IP addresses is not allowed as DHCP snooping does not support staticbinding entries8.3.1 IP Source Guard ConfigurationAssuming DHCP snooping is already configured with untrusted port members 2-20, enter thefollowing commands:• 5500(config)#interface fastEthernet 2-20• 5500(config-if)#ip verify source• 5500(config-if)#exit