Whether USG firewalls support the check of a source IP address

7

The USG firewalls support the check of a source IP address.

Other related questions:
Method used to configure the check of a source IP address on USG firewalls
The check of a source IP address indicates that an interface checks the source IP address upon receiving an IP packet. If the source IP address of the packet is not in the network segment of the interface, the interface discards the packet; if the source IP address of the packet is in the network segment of the interface, the interface can forward the packet. The IP masquerading is effectively prevented by means of the check of a source IP address. To configure the check of a source IP address, run the ip verify source-address command in the interface view. By default, the interface does not verify the source address of a received packet.

Whether USG firewalls support the BFD
USG firewalls support the BFD.

Method used to check the IP address conflict on the USG2000, USG5000, and USG6000
You can check the IP address conflict on the USG2000, USG5000, and USG6000 as follows: On the CLI, enter the display logbuffer command. For example: [USG5500]display logbuffer Logging buffer configuration and contents:enabled Allowed max buffer size : 1024 Actual buffer size : 1024 Channel number : 4 , Channel name : logbuffer Dropped messages : 0 Overwritten messages : 1200 Current messages : 514 %2015-04-24 10:56:26 USG5500 %%01ARP/4/DUP_IPADDR(l): Receive an ARP packet with duplicate ip address 192.168.101.207 from GigabitEthernet0/0/0, source MAC is 3400-a3d9-1897! //The conflicted address is 192.168.101.207.// %2015-04-24 10:56:21 USG5500 %%01ARP/4/DUP_IPADDR(l): Receive an ARP packet with duplicate ip address 192.168.101.207 from GigabitEthernet0/0/0, source MAC is 3400-a3d9-1897!

Whether USG firewalls support static MAC address entries
The USG firewalls support static MAC address entries.

Whether USG firewalls support MAC address learning restriction
The USG2000 and USG5000 support MAC address learning restriction.

If you have more questions, you can seek help from following ways:
To iKnow To Live Chat
Scroll to top