Some services are interrupted after IPSG is configured on an S series switch. Why

If some services are interrupted after IPSG is configured on an S series switch (except the S1700), possible causes include the following:
1. DHCP snooping is not enabled on a DHCP terminal or the DHCP terminal does not obtain an IP address again after DHCP snooping is enabled. As a result, the dynamic binding table does not contain correct information about the terminal. IP packets sent by the terminal are discarded, and the terminal cannot communicate with the network.
Solution: Enable DHCP snooping on the terminal and make the terminal obtain an IP address again to generate a dynamic binding entry in the binding table.
2. No static binding entry corresponding to a static user is generated. As a result, the user cannot go online.
Solution: Create a static binding entry for each authorized user connected to the switch.

Note: After the ip source check user-bind enable command is configured on an interface or in a VLAN. The interface or VLAN matches all received IP packets against a binding table and discards those not matching the binding table.

Scroll to top