• Supported Platforms
• EX Series

• Related Topics
• Example: Configuring IP Source Guard on a Data VLAN That Shares an Interface with a Voice VLAN
• Example: Configuring IP Source Guard with Other EX Series Switch Features to Mitigate Address-Spoofing Attacks on Untrusted Access Interfaces
• Configuring IP Source Guard (CLI Procedure)

ip-source-guard

Syntax

Hierarchy Level

Release Information

Statement introduced in Junos OS Release 9.2 for EX Series switches.

Description

Perform IP source guard checking on packets sent from access interfaces. Validate source IP addresses and source MAC addresses on all VLANs or on the specified VLAN or VLAN range. Forward packets with valid addresses and drop those with invalid addresses.

• ip-source-guard—Enable IP source guard checking.
• no-ip-source-guard—Disable IP source guard checking.

Default

Disabled.

Required Privilege Level

routing—To view this statement in the configuration.

routing-control—To add this statement to the configuration.