Can IP Source Guard Stop Spoofing

[mario3]

I am using 802.1x but I am able to spoof a printer port using my laptop. It was suggested that I try using IP source guard. Has anyone used IP source guard to address spoofing?

[Marcelo Morais]

Hi @mario3 

 please take a look at Information About IP Source Guard.

Filtering on trusted IP and MAC address bindings helps prevent attacks that rely on spoofing attacks, in
which an attacker uses the IP address of a valid host to gain unauthorized network access. To circumvent
IP Source Guard, an attacker would have to spoof both the IP address and the MAC address of a valid
host.

Hope this helps.

[Mike.Cifelli]

I am able to spoof a printer port using my laptop.

-Is your printer port also setup for 8021x or just mab or both?  

Not sure if the provided pdf provides your source guard options, but here they are:

1. Source IP Address filter: ip traffic is filtered based on its source IP.  Only traffic with a source IP address that matches the IP source binding entry Is permitted.
2. Source IP and MAC address filter:  IP traffic is filtered based on its source IP address and MAC address.

[mario3]

Hello Mike,

The port is configured with both MAB and 802.1x.