Filter
Top Products
DES-7200 Configuration Guide Chapter 5 Port-based Flow Control Configuration
5-21
GigabitEthernet0/5 enabled ACCESS 3 1 Enabled ALL
5.6 Limiting the Number of
Access IPs on the Port
Overview
Default configurations to limit the number of access IPs on the port
Configure the maximum number of access IPs on the port
Display the number of access IPs on the port
5.6.1 Overview
DES-7200 switches support multiple access control applications (such as: IP Source
Guard, port security, global IP+MAC binding and etc). These port access applications
implement access control through the source IP address of the user in order to filter IP
packets and prevent invalid users from using network resources.
The feature of limiting the number of access IPs on the port is intended to limit the
number of access IPs bound by these secure access applications on the port, so as to
limit the number of users sharing the port bandwidth of switch.
You can configure the number of IP addresses allowed to access network for each port.
If the number of IP addresses bound by respective access applications on the port
hasn't reached the configured threshold, the access applications shall be able to
further bind and add valid users; if the number of IP addresses has reached the
configured threshold, the access applications won't be able to further bind valid users.
If the number of IP addresses under the port has exceeded the configured threshold,
the excessive IP addresses won't be allowed to pass through.
Caution
1． Limiting the number of access IPs on the port will take effect only
if IP+MAC bindings or IP bindings of access control applications
have taken effect. If no access application has been configured
on the port (or if the port is the excluded port of global IP+MAC
bindings), the limiting won't take effect.
2． When a same IP address is bound by IP+MAC binding and IP
binding, it will be treated as two user IPs.
3． The access IP limiting only applies to IPv4 packets.
4． Except for the excluded port of global IP+MAC binding, the users
added via global IP+MAC binding will be included into the
number of IP addresses limited on each port.