Static IPSG bindings

Static IPSG is supported only on the following ports:

• Layer 2 Ethernet ports on the following modules:

  • HMIM-8GSW.

  • HMIM-8GSWF.

  • HMIM-24GSW.

  • HMIM-24GSWP.

  • SIC-4GSW.

  • SIC-4GSWP.

• Fixed Layer 2 Ethernet ports on the following routers:

  • MSR1002-4/1003-8S.

  • MSR2004-24/2004-48.

  • MSR954 (JH296A/JH297A/JH298A/JH299A/JH373A).

  • MSR958 (JH300A/JH301A).

Static IPSG bindings are configured manually. They are suitable for scenarios where few hosts exist on a LAN and their IP addresses are manually configured. For example, you can configure a static IPSG binding on an interface that connects to a server. This binding allows the interface to receive packets only from the server.

Static IPSG bindings on an interface implement the following functions:

• Filter incoming IPv4 or IPv6 packets on the interface.

• Cooperate with ARP attack detection in IPv4 for user validity checking.

For information about ARP attack detection, see "Configuring ARP attack protection."

Static IPSG bindings are interface-specific. A static IPSG binding binds the IP address, MAC address, VLAN, or any combination of the items in interface view. The binding takes effect only on the interface to check the validity of users who are attempting to access the interface.