IP Source-Guard

[tsmarcyes]

ip source-guard seems like a real handy simple l2 port security feature, yet I hardly ever see or hear of anyone using it.  Is there a performance hit taken when enabling this feature or some other issues that arise?  I've seen port-security turned on more often than this feature and that can have a lot of complications.  However, there doesnt seem like there would be a lot of complications for source guard other than static devices.

[rsimoni]

Hi,

maybe you don't hear of it as it does not cause any particular problem when enabled.

It works fine and after all it is not even so complicated to configure (if you have DHCP and DHCP snooping).

On the other end there are lots of fancy features that could bring many benefits which are not widely used.

Market needs and trends are not always predictable.

Riccardo

[Muhammed AKYUZ]

we are using on 3560 swithes with dhcp snooping. nobody can use static ip adrress.

Sent from Cisco Technical Support iPhone App