Configuring the IPSG Function
Context
To defend against IP address spoofing attacks, enable the IP source guard (IPSG) function to check IP packets against a binding table. This function prevents unauthorized packets from passing through an AP and ensures network security.
Procedure
- Run system-view
The system view is displayed.
- Run wlan
The WLAN view is displayed.
- Run vap-profile name profile-name
The VAP profile view is displayed.
- Run ip source check user-bind enable
The IPSG function is enabled on the AP.
By default, IP source guard is disabled on APs.
After the IPSG function is enabled, run the undo learn-client-address disable command to enable STA address learning to make the IPSG function take effect.