Ruijie Community

Title: How to prevent private setting of IP address [Print this page]

Author: GTAC-Jenny Time: 2021-11-17 14:53
Title: How to prevent private setting of IP address
Configure DHCP SNOOPING +IP Source Guard can effectively prevent private IP addresses：
1) For software versions 10.3 and later, the configuration of DHCP SNOOPING +IP Source Guard is as follows:
Ruijie(config)#ip dhcp snooping
Ruijie(config)#int g0/24

Ruijie(config-if-GigabitEthernet 0/24)#ip dhcp snooping trust //Set up the trusted port of DHCP SNOOPING on the uplink interface

Ruijie(config-if-GigabitEthernet 0/24)#exit
Ruijie(config)#int rang g0/1 - 23

Ruijie(config-if-range)#ip verify source port-security //Enable the IP Source Guard function on the downlink PC port

2) For software versions earlier than 10.3, the configuration of DHCP SNOOPING +IP Source Guard is as follows:

Ruijie(config)#ip dhcp snooping

Ruijie(config)#int g0/25

Ruijie(config-if-GigabitEthernet 0/25)#ip dhcp snooping trust //上Set up the trusted port of DHCP SNOOPING on the uplink interface

Ruijie(config-if-GigabitEthernet 0/25)#exit
Ruijie(config)#int rang f0/1-24

Ruijie(config-if-range)#ip dhcp snooping address-bind //Enable the IP Source Guard function on the downlink PC port

Welcome to Ruijie Community (https://community.ruijienetworks.com/)