Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

IP source guard problem on Cat4500 switch

Hi,

Anyone has experience in using IP source guard feature on Cat4500 switch?

When creating a static IP binding, only one single IP address can be used. What if I want to create a static binding for a range of IP addresses (ex: a subnet) for a specific port? Or is there any better way for the C4500/SUP4 to achieve the same function as uRPF to mitigate IP spoofing? Any good idea is appreciated because I don't want to create tens or hundreds of single-ip-address static binding in the config file.

Thanks.

kycheng

2 REPLIES
Bronze

Re: IP source guard problem on Cat4500 switch

Guess you can address this issue, if you allocate IP address using DHCP and you enable DHCP snooping on the switch. Support for sub-net would be good though. Any one any Thoughts?

http://www.cisco.com/en/US/products/hw/switches/ps4324/products_configuration_guide_

New Member

Re: IP source guard problem on Cat4500 switch

Yes, if users allocate IP addresses using DHCP, there should be no problem. Unfortunately, they are not and they use fixed IP addresses. If the static binding configuration can work with ACL, that would be great. But don't know if Cisco has the roadmap to do so.

91
Views
0
Helpful
2
Replies
CreatePlease login to create content